China-Linked Spyware Exposes Millions of Google Play Store Users' Personal Data

Two apps with a combined 2 million downloads from the Google Play Store have been found to contain hidden spyware linked to China. The apps, disguised as file management software, can self-launch without user interaction and secretly exfiltrate sensitive user data to malicious servers in China. The spyware collected personal data such as device information, location, media content, and contact lists. Users are advised to delete the apps and avoid downloading apps without reviews or from third-party stores. Organizations should automate mobile detection and response to ensure compliance with security policies.