Hidden in "harmless" apps
https://www.bleepingcomputer.com/news/security/phonespy-android-spyware-campaign-targeting-south-korean-users/
An ongoing spyware campaign dubbed 'PhoneSpy' targets South Korean users via a range of lifestyle apps that nest in the device and silently exfiltrate data.
The campaign deploys a powerful Android malware capable of stealing sensitive information from the users and taking over the device's microphone and camera.