Malicious Loan App Removed from iOS and Google Play App Store Posed Severe Risks to Users

SUMMARY :

A SpyLoan application called 'RapiPlata' was identified on a victim's device, having been downloaded by over 150,000 users from both Google Play and Apple App Store. The app, which ranked in the top 20 finance category in Colombia, had extensive access to sensitive user data, including SMS messages, call logs, calendar events, and installed applications. It uploaded this data to its servers, posing significant risks to users' privacy and financial security. The app's malicious behavior included harassing messages, unauthorized loan approvals, and data theft. Despite its removal from official app stores, it remains accessible through third-party websites. The app is part of a larger SpyLoan malware operation, with similarities to previously identified malicious apps.

OPENCTI LABELS :

data theft,financial fraud,mobile security,app store security,préstamo rápido,rapiplata,spyloan,sms scanning,predatory lending


Open in NetmanageIT OpenCTI Public Instance with below link!


Use public read only username and password on login page.

NOTE : Use Public READ only user credentials on login page banner.


Malicious Loan App Removed from iOS and Google Play App Store Posed Severe Risks to Users