Cybercriminals have been observed disguising Octo2 as legitimate applications such as Google Chrome and NordVPN. In addition, the malware is designed to intercept push notifications from select apps, indicating that these applications are of interest to its operators.

Source: Infosecurity