Google found a series of hacking tools they said were used by a Russian espionage group and a cybercriminal group in China.
The hacker has been luring users in Brazil to download the fake Starlink app through phishing pages that impersonate the Google Play Store.
Victims may remain unaware that their UPI account has been taken over on another device as the attack happens silently, as per researchers.