TLDR InfoSec · ATTACKS & VULNERABILITIES

SPYLEND ANDROID MALWARE DOWNLOADED 100K TIMES FROM GOOGLE PLAY

bleepingcomputer.com2 min read

Summary from the TLDR InfoSec newsletter

SpyLend is a malicious app masquerading as a finance app called Finance Simplified on the Google Play store. The app evaded detection by running a WebView which instructed users to download an APK for a loan app if the user was in India. It collected a large amount of data and used it to extort users to accept high interest rate loans.