The malware also utilized optical character recognition (OCR) to scan the photo gallery for relevant images and extract data. While the researchers did not find any specific regional targeting, most victims were located in countries such as Malaysia, Vietnam, Indonesia, the Philippines, Uganda, and Mexico.
