Beware: Android Malware Stealing WhatsApp Backups and Chats

GravityRAT, a cross-platform malware capable of targeting Windows, Android, and macOS devices, has been found masquerading as messaging apps BingeChat and Chatico in a narrowly targeted campaign since June 2022. The updated version of the Android remote access trojan can exfiltrate WhatsApp backups and receive commands to delete files. The threat actor is suspected to be based in Pakistan, with recent attacks involving GravityRAT targeting military personnel in India and among the Pakistan Air Force by camouflaging it as cloud storage and entertainment apps.