The hardware vulnerability - found primarily in budget handsets - makes it possible to steal sensitive user data, including crypto wallet seed phrases, in less than a minute.
The hacker has been luring users in Brazil to download the fake Starlink app through phishing pages that impersonate the Google Play Store.
Your weekly cybersecurity roundup covering the latest threats, exploits, vulnerabilities, and security news you need to know.