Kaspersky cybersecurity experts: The victims are lured to download the malware with Facebook and Instagram accounts, that point to a Telegram channel, that distributes a malicious VPN.
ESET cybersecurity experts: It’s a new version of the Android malware, and it has been used maybe as a prelude of a spear phishing attack via text messages.
ESET cybersecurity experts: It’s a banking trojan that has already targeted users from Poland, impersonating Bolt Food. Goal: to steal banking-cryptocurrency credentials.
NCSC-FI cybersecurity experts: The malware aims to steal data from devices, and it is spread via SMS and MMS. Also iPhone users has been targeted, but to bait them in frauds.
Check Point cybersecurity experts: The malware steals credentials and banking information. It was spread via Google Play Store. Many victims from Italy and UK.
Lab52 cybersecurity researchers: The App steals information from mobile devices and sends it to a server in Russia. It looks like Turla's work, but there is no confirmation.