<![CDATA[Corp MDM Spyware Targets Logistics Firms, Steals New SMS and Redirects Calls]]>The logistics sector is being targeted by a new Android spyware campaign distributing a threat tracked as Corp MDM. According to Have I Been Squatted, the operation relies on fake Google Play pages branded as CEVA and TKW Logistics to deliver a malicious Android Package Kit (APK).

The APK is disguised as a system service and uses the package name com.corp.mdm.

Once installed, Corp MDM is reported to steal newly received SMS messages and redirect calls, giving attackers a channel for interception and further abuse of the infected device.

  • Distribution: fake Google Play pages impersonating CEVA and TKW Logistics
  • Payload: Android APK masquerading as a system service
  • Package name: com.corp.mdm
  • Capabilities: theft of new SMS messages and call redirection
  • Targeted sector: logistics

Source: The Hacker News

Has your organization seen any fake app store pages or suspicious APKs impersonating logistics providers?

]]>https://xploitlk.com/topic/471/corp-mdm-spyware-targets-logistics-firms-steals-new-sms-and-redirects-callsRSS for NodeTue, 27 Oct 2026 08:23:07 GMTSat, 26 Sep 2026 08:30:23 GMT60