More than 327,000 Android devices have been compromised by the novel Xamalicious malware, most of which are in Brazil, the UK, Australia, the U.S., and Mexico, The Hacker News reports. Twenty-five health, gaming, productivity, and horoscope apps, some of which have been on the Google Play Store since mid-2020, have been used to distribute Xamalicious, which leverages Android accessibility permissions to exfiltrate system metadata and deploy a first-stage dropper enabling primary APK updating and a second-stage payload that could facilitate device takeovers and further malicious actions, a report from the McAfee Mobile Research Team revealed.

Source: SC Magazine