CyberSum logo
Back

Android Spyware Poses as Signal, ToTok App Upgrades

Cyber Security News by CyberSum.net
4 sources
Two new Android spyware campaigns, dubbed ProSpy and ToSpy, are targeting users by impersonating popular messaging apps. Attackers distribute malicious APKs through fake websites that mimic official app stores and plugin pages for Signal and ToTok. Once installed, the spyware steals sensitive data including contacts, SMS messages, files, and chat backups. The malware uses stealth techniques, such as hiding its icon and launching the legitimate app, to avoid detection. These campaigns, which appear to be regionally focused, use multiple methods to maintain persistence on infected devices.

Also Read

Rhadamanthys Stealer Adopts Pro SaaS Model

A sophisticated information stealer named Rhadamanthys is being sold on underground markets as a professional Malware-as-a-Service. The operators use a subscription-based model with tiered pricing, mimicking legitimate software businesses to attract serious cybercriminals. Its latest version introduces advanced features, including custom executable formats, strong obfuscation, and payload delivery hidden within PNG image files. The malware also employs enhanced evasion techniques to bypass security analysis and sandbox environments. Rhadamanthys is designed to steal a wide range of sensitive data, including credentials, cryptocurrency wallets, browser information, and VPN configurations.

By Cyber Security News by CyberSum.net