New malware with extensive spyware capabilities steals data from infected Android devices and is designed to automatically trigger whenever new info is ready for exfiltration.
The spyware can only be installed as a 'System Update' app via third-party Android app stores as it was never available on Google's Play Store.
This drastically limits the number of devices it can infect, given that most experienced users will most likely avoid installing it in the first place.
The malware also lacks a method to infect other Android devices on its own, adding to its limited spreading capabilities.