China-linked threat actor GREF has leveraged trojanized Telegram and Signal messaging apps available in the Google Play Store and Samsung Galaxy Store to facilitate the delivery of BadBazaar spyware, according to The Hacker News.
Article Link: Trojanized Android messaging apps used for BadBazaar spyware distribution | SC Media