FireScam info-stealing malware supports spyware capabilities
Cyfirma warns of FireScam, an Android info-stealing malware disguised as a fake Telegram Premium app. The malware, distributed through a phishing website, monitors app notifications, intercepts sensitive data, and exfiltrates it to a Firebase database. FireScam employs sophisticated evasion techniques, including obfuscation and dynamic receiver access control, to avoid detection.