Trojanized Android messaging apps used for BadBazaar spyware distribution

China-linked threat actor GREF has leveraged trojanized Telegram and Signal messaging apps available in the Google Play Store and Samsung Galaxy Store to facilitate the delivery of BadBazaar spyware, according to The Hacker News.

actor android apps badbazaar china delivery distribution endpointdevice-security galaxy galaxy store google google play google play store gref hacker malware messaging messaging apps play play store samsung samsung galaxy samsung galaxy store signal spyware store telegram threat threat actor