Inside Corp MDM, the Android spyware targeting logistics companies - Have I Been Squatted

An Android surveillance malware campaign targeting the logistics sector uses fake Google Play listings to deliver an APK labeled System Service (com.corp.mdm) that exfiltrates new SMS messages, can forward calls via USSD, and reports to a cleartext HTTP C2. The campaign features persistence, a foreground service, a web-based operator panel, and is linked to broader activity including credential phishing and Windows malware, with attribution hints to Armenian and Russian links.