Android apps laced with North Korean spyware found in Google Play

Google's Firebase platform also hosted configuration settings used by the apps.

https://arstechnica.com/security/2025/03/researchers-find-north-korean-spy-apps-hosted-in-google-play/