Malicious Loan App Removed from iOS and Google Play App Store Posed Severe Risks to Users
Essential information
- Published
- 20/06/2025 19:26
- Modified
- 23/06/2025 23:14
- Tags
- 2025-06-20 app store security data theft financial fraud mobile security predatory lending préstamo rápido rapiplata sms scanning spyloan
- Related entities
- 18 observables, 2 others
Description
A SpyLoan application called 'RapiPlata' was identified on a victim's device, having been downloaded by over 150,000 users from both Google Play and Apple App Store. The app, which ranked in the top 20 finance category in Colombia, had extensive access to sensitive user data, including SMS messages, call logs, calendar events, and installed applications. It uploaded this data to its servers, posing significant risks to users' privacy and financial security. The app's malicious behavior included harassing messages, unauthorized loan approvals, and data theft. Despite its removal from official app stores, it remains accessible through third-party websites. The app is part of a larger SpyLoan malware operation, with similarities to previously identified malicious apps.