The North Korea linked group Lazarus APT has been using a new strain of Android malware to target smartphone users in South Korea. The hacking campaign was spotted by McAfee and Palo Alto Networks, both security firms attributed the attacks to the Hidden Cobra APT. The malware delivers a backdoor as an executable and linkable format (ELF) file, it allows to take full control of the infected device. The malicious APK wasnt available on the Google Play store and it is still unclear how the APT distributed it.”]
Source: https://securityaffairs.co/wordpress/65854/apt/lazarus-apt-android.html