More than 120 users of Kaspersky Lab products were affected in the last 10 days, the most affected countries are Russia, Ukraine, and India. The group behind Roaming Mantis targets iOS devices as well, with a phishing site http://security[.]apple[.]com to steal the user credentials. The Phishing page supports for 25 languages and it is designed to steal user ID, password, card number, card expiration date and CVV. To evade detection, it generates the malicious filename in real-time.”]
Source: https://gbhackers.com/roaming-mantis-malware-evolved-rapidy/