Corp MDM Spyware Targets Logistics Firms, Steals New SMS and Redirects Calls

A malicious cyber campaign is targeting the logistics sector with an Android spyware called Corp MDM. The campaign uses fake Google Play pages disguised as legitimate logistics companies to distribute the spyware. The spyware is packaged as a system service in an Android Package Kit file with the package name com.corp.mdm. The goal of the spyware is to steal new SMS messages and redirect calls. The fake Google Play pages are branded as CEVA and TKW Logistics, attempting to trick victims into downloading the malicious app.