Researchers found deceptive Android apps using Google Play’s Early Access program, misleading descriptions, and fake functionality to build trust before directing users to risky external downloads and services.
Threat actors impersonate IT help desks by calling and texting employees on personal devices, directing them to phishing pages designed to steal Microsoft 365 credentials and authentication tokens.
Zimperium argues agentic AI can lower the skill and time needed to reverse-engineer mobile apps, bypass protections, automate app interactions and scale fraud, while relying on existing attack techniques rather than a new vulnerability class.