China-Linked Hackers Plant Fake Signal App on Google Play, Targeting Users' Data and Bank Accounts

Researchers at cybersecurity company ESET have discovered a fake version of the private messaging app Signal on Google Play, which they believe is linked to a Chinese spy operation. The fake app, called Signal Plus Messenger, functioned the same as the legitimate version but secretly spied on users' communications by automatically connecting the compromised device to the attacker's Signal account. This is the first documented case of spying on Signal via secret "autolinking." The same hacking crew also created a malicious Telegram app called Flygram, targeting Uyghurs. While Google removed the fake apps, Samsung has not taken any action.