The SpyLoan applications are exploiting users in the name of “easy loans,” making their lives miserable, a report by McAfee Labs reveals.
These malicious apps have been downloaded over 8 million times and operate under the guise of providing quick loans with minimal requirements, often leading to harassment, extortion, and financial losses.
Security researcher Fernando Ruiz warned that these apps use social engineering tactics to extract sensitive information and gain additional permissions on users’ devices.
Once installed, they create a cycle of distress for victims, especially in regions like Mexico, Indonesia, Tanzania, and Peru, among others.
The apps, some still available on Google Play Store, include:
- Préstamo Seguro-Rápido, seguro (com.prestamoseguro.ss )
- Préstamo Rápido-Credit Easy (com.voscp.rapido)
- ได้บาทง่ายๆ-สินเชื่อด่วน (com.uang.belanja)
- RupiahKilat-Dana cair (com.rupiahkilat.best)
- ยืมอย่างมีความสุข – เงินกู้ (com.gotoloan.cash)
- เงินมีความสุข – สินเชื่อด่วน (com.hm.happy.money)
- KreditKu-Uang Online (com.kreditku.kuindo)
- Dana Kilat-Pinjaman kecil (com.winner.rupiahcl)
- Cash Loan-Vay tiền (com.vay.cashloan.cash)
- RapidFinance (com.restrict.bright.cowboy)
- PrêtPourVous (com.credit.orange.enespeces.mtn.ouest.wave.argent.tresor.payer.pret)
- Huayna Money – Préstamo Rápido (com.huaynamoney.prestamos.creditos.peru.loan.credit)
- IPréstamos: Rápido Crédito (com.credito.iprestamos.dinero.en.linea.chile)
- ConseguirSol-Dinero Rápido (com.conseguir.sol.pe)
- ÉcoPrêt Prêt En Ligne (com.pret.loan.ligne.personnel)
Scammers also leverage social media platforms like Facebook to promote these apps, increasing their reach to the victims.
Users are urged to stay vigilant and avoid downloading apps from unverified sources.
Source: ARY News
