At a Glance Attribute Details Malware Family Android Toll Fraud family (including Messenger Pro and AqMu builds) Threat Actor Unknown (unconfirmed attribution) Target Victims Android users across Poland, France, China, and 12 other countries Delivery Vector Deceptive Meta Facebook advertisements redirecting to Google Play listings Key Capabilities Multi-stage in-memory DEX execution, background WebView billing, premium SMS theft Source

Digital license plates sold by Reviver, already legal to buy in some states and drive with nationwide, can be hacked by their owners to evade traffic regulations or even law enforcement surveillance.