New spyware operation targets users in Pakistan that leverages trojanized versions of legitimate Android apps to carry out covert surveillance and espionage. The Pakistan Citizen Portal app also transmits sensitive information such as users’ computerized national identity card (CNIC) numbers, their passport details, and the username and password for Facebook accounts. The development is yet another reason why users need to stick to trusted sources to download third-party apps, verify if an app is indeed built by a genuine developer.
Source: https://thehackernews.com/2021/01/warning-5-new-trojanized-android-apps.html