Fake dating app used as lure in spyware campaign targeting Pakistan, ESET Research discovers

Fake dating app used as lure in spyware campaign targeting Pakistan, ESET Research discovers

ESET researchers have uncovered an Android spyware campaign that uses romance scam tactics to target individuals in Pakistan. The campaign leverages the GhostChat spyware, which enables covert surveillance on the device, allowing the threat actor to monitor activity and exfiltrate sensitive data. The ESET investigation revealed further activities conducted by the same threat actor: an attack involving ClickFix, which tricks users into executing …

A fake romance turns into an Android spyware infection

ESET researchers have identified an Android spyware campaign that uses romance scam tactics to target individuals in Pakistan. The operation relies on a malicious app disguised as a chat service that routes conversations through WhatsApp. Behind the romance lure, the app’s primary function is to steal data from infected devices. ESET tracks the malware as GhostChat. GhostChat attack flow (Source: ESET) The same threat actor appears to be running…