Interlab, a non-profit based in South Korea, discovered a new malware called RambleOn that has been used by suspected North Korean nation-state actors to target a journalist in South Korea. The spyware camouflages as a secure chat app called Fizzle and has the ability to read and leak the target’s contact list, SMS, voice call content, location, and more.
The malicious functionalities include the ability to request intrusive permissions to collect files, access call logs, intercept SMS messages, record audio, and location data.