This Android malware can steal all your WhatsApp messages and even record your phone calls
A sophisticated malware is capable of stealing all the messages from your favorite applications, also recording your phone calls and even accessing your phone’s camera at any time.
Right now a dangerous security threat is circulating for all of our Android devices, in the form of a new malware masquerading as a system update And that when you install it, it could steal all your personal data, application messages and even take pictures and videos without you noticing.
Investigators at the analysis firm Zimperium, have revealed the presence of a new spyware called System Update It attacks Android devices and pretends to be a system update for the phone. If you have always downloaded all the apps through the Google Play Store, you should not worry, but if you have ever had the need to access an external APK you should check if your mobile is infected.
This malware is quite sophisticated, and it is that once installed is masked using the same notification as a verified update from Google, so at any moment you could have installed an illegitimate update that you thought was really from Google.
If you have been infected, this malware can steal messages from any instant messaging application such as WhatsApp or Telegram, keep your Chrome history; record audio without your consent, including even phone calls; take pictures of yourself with the front camera and steal videos and images stored on your mobile.
Specific, according to Zimperium, this malware can do all of this:
- Steal instant messaging messages
- Steal IM database files (if root is available)
- Inspect your default browser bookmarks and searches
- Inspect search and bookmark history of Google Chrome, Mozilla Firefox, and Samsung Internet browser
- Search for files with specific extensions (including .pdf, .doc, .docx and .xls, .xlsx);
- Inspect the clipboard data
- Inspect the content of notifications
- Audio recording
- Phone call recording
- Take pictures periodically (either through the front or rear camera)
- Know the list of installed applications
- Steal images and videos
- GPS location monitoring
- Steal SMS messages
- Steal phone contacts
- Steal call logs
- Extract device information (e.g. installed apps, device name, storage statistics)
- Hide your presence by hiding the device drawer / menu icon.
As you can see, it is quite serious if someone has finally been infected, so you must remember very well if you have recently installed an APK.
In this case, the best solution would be to do a factory reset of the device or if you don’t want to be so drastic, delete all the applications that you have installed outside of the Google Play Store. You must also pass the best antivirus you have.