SpyLoan Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
November 4, 2025
Last Seen
November 4, 2025

SpyLoan is a malware family tracked across 2 threat clusters and 1 intelligence report mention on ThreatCluster. First observed November 4, 2025; most recent activity November 4, 2025.

Overview

SpyLoan is a malware family that propagated through malicious Android apps hosted on Google Play, achieving roughly 42 million downloads. This scale signals a significant mobile threat and demonstrates how cyber actors can leverage official app stores to reach a vast user base, underscoring the importance of app-store integrity and mobile defense.

Related Threat Clusters

Recent Intelligence Reports

  • Malicious Android apps on Google Play downloaded 42 million times — Bleepingcomputer · November 4, 2025

CVSS v3.1 Breakdown