uCreator spyware targets Telegram and WeChat through modified Android apps

First reported by The Hacker News at · Updated · 2 sources

The rentable platform hides malicious code inside repackaged legitimate apps. According to The Hacker News, infection requires installing tampered copies distributed outside official app stores or running WeChat inside the developers' container app. Security Affairs reports that its YingGai framework can intercept one-time passwords, collect contacts and steal chat and mobile wallet data.

Covered by 2 publishers within 2 hours of the first report.

Reporting2

The Hacker News uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat Accounts · info@thehackernews.com (The Hacker News)
Security Affairs Researchers Uncover Rentable Android Spyware uCreater Targeting WeChat and Telegram · Pierluigi Paganini

Related

Hirudo Android malware swaps installed banking apps for tampered copies
Microsoft patches Authenticator bug that exposed Android work-account tokens
Android gaming app adds support for Game Pass
Android Auto could add support for apps from work profiles

Topics Android