https://techcrunch.com/2021/11/10/android-spyware-legitimate-apps/

Security researchers have uncovered a new spyware campaign that’s targeting South Korean residents with Android devices in order to steal confidential data.

Unlike other spyware campaigns that typically take advantage of on-device vulnerabilities, this campaign, known as PhoneSpy, hides in plain sight on victims’ devices, masquerading as legitimate Android lifestyle apps from TV streaming to yoga instruction. In reality, however, the spyware is stealthily exfoliating data from the victim’s device, including login credentials, messages, precise granular location and images. PhoneSpy is also capable of uninstalling any apps, including mobile security apps.