{"id":11481,"date":"2025-07-18T12:40:24","date_gmt":"2025-07-18T05:40:24","guid":{"rendered":"https:\/\/infosec.new88088.net\/?p=11481"},"modified":"2026-06-25T10:00:32","modified_gmt":"2026-06-25T03:00:32","slug":"konfety-new-android-malware-with-apk-and-dynamic-code-evasion-tactics","status":"publish","type":"post","link":"https:\/\/infosec.new88088.net\/en\/2025\/07\/18\/konfety-new-android-malware-with-apk-and-dynamic-code-evasion-tactics\/","title":{"rendered":"Konfety \u2013 New Android Malware with APK and dynamic code evasion tactics"},"content":{"rendered":"
Recently, a new malware called Konfety was discovered by security researchers, which attracted the attention of the cybersecurity community. It is a sophisticated variant of Android malware, using sophisticated concealment tactics to avoid detection and prevention by common security tools.<\/b>
\n\u200b<\/div>\n
\"1752822471458.png\"<\/a>\u200b<\/div>\n
Konfety’s way of operating is not simply fraudulent advertising but can also pose a major danger to users and businesses if no timely precautions are taken.<\/div>\n
Konfety’s sophisticated tactics<\/div>\n
Konfety operates under the tactic of “evil twin”, i.e., using fake apps to trick users. This malware will disguise itself as legitimate apps on Google Play, but in reality it will hide malicious code. When installed, Konfety can perform the following actions:<\/div>\n