#infosecupdate — Public Fediverse posts

🚨 [Threat Advisory] Android Phishing Campaign: Telegram APKs

- Over 600 typosquatting domains deliver fake Telegram APKs

- Domains host QR codes → redirect to zifeiji[.]asia

- APKs signed using v1 scheme → Janus vulnerability exploited

- Targets Android 5.0–8.0 devices

- Permissions abused for remote access, data theft

- The risk surface is broad. Recommend org-wide mobile policy audits.

📎 Source: https://www.technadu.com/malicious-telegram-apk-campaign-exploits-fake-domains-and-android-vulnerabilities/602732/

#JanusVuln #MobileThreatIntel #PhishingCampaign #InfosecUpdate