“The researchers at Kaspersky Lab have noted a new attack on Tibetan activists that is now targeting their smartphones. According to a report, a recent spear phishing attack, launched from the hacked email account of a “high-profile Tibetan activist” skipped the usual payload of malicious ZIP, DOC, XLS and PDF files and instead had an APK file (Android PacKage) attached. This APK file, which presented itself as information and a statement about the “World Uyghur Congress Conference”, if installed and run by the user displayed a brief text about the forthcoming Conference but in the background it contacted a command-and-control server and began harvesting geodata, contacts, call logs and SMS messages to send back to that server….”