Vastflux was first detected by Human Security last year while working on a separate threat. It worked by targeting a single advertising slot rather than a user’s entire phone or an entire app. Once the group won an ad slot via advertiser auction, they would insert malicious code allowing them…