The hacker has been luring users in Brazil to download the fake Starlink app through phishing pages that impersonate the Google Play Store.
A highly sophisticated set of iPhone hijacking techniques has likely infected tens of thousands of phones or more. Clues suggest it was originally built for the US government.