Evolved: MoqHao Android Malware Packs Auto-Execution Punch

TLDTR: A new variant of Android malware called MoqHao has been discovered. This variant has the ability to auto-execute on infected devices without requiring any user interaction. The malware is associated with a Chinese financially motivated cluster and targets Android users in France, Germany, India, Japan, and South Korea. It is distributed via smishing techniques and runs automatically upon installation, prompting victims to grant risky permissions. The malware is equipped with features that allow it to harvest sensitive information and enable/disable Wi-Fi. McAfee has reported the findings to Google, which is working on implementing mitigations in a future Android version.