When you purchase through links on our site, we may earn an affiliate commission.Heres how it works.
This alarm was sounded by cybersecurity researchers Group-IB, which spotted the new campaign in June this year.
In this campaign, unnamed threat actors were delivering a piece of malware called GoldDigger.
This is also probably the best way to spot a malicious app - if it demands excessive permissions.
If the victim grants these permissions, GoldDigger will start by digging out sensitive user information, including passwords.