The new technique has a hacker simulate an archiving app in the web browser to trick victims as they try to access a .zip
iRecorder was a legitimate app made available on Google Play Store in September 2021. A remote access trojan AhRat was most likely added to