Malware is a remote administration tool (RAT) designed to steal sensitive information from compromised Android devices. Malware uses an open source library, available on GitHub, to gain the ability to record incoming and outgoing calls from the compromised Android device. One of the variants even exploits a known Android flaw (CVE-2015-3636) to get root access on the compromised device. South Korean media have linked KevDroid with North Korea state-sponsored cyber espionage hacking group “,” primarily known for targeting South Korean targets.
Source: https://thehackernews.com/2018/04/android-spying-trojan.html