COWARDDUCK: Android Backdoor Disguised as Security Tool

COWARDDUCK is a full-featured Android backdoor distributed via messaging apps, disguised as security tools. It exfiltrates contacts, files, and geolocation using Dropbox API.