All articles tagged with #vajraspy
Researchers at ESET have identified 12 malicious Android apps, including some on Google Play, that secretly record conversations and steal personal data using spyware called VajraSpy, which exploits social engineering and emotional trust to infect devices. Users are advised to delete these apps immediately, watch for signs of infection, and follow security best practices to protect their privacy.
A remote access trojan called VajraSpy was discovered in 12 malicious Android applications, with six of them available on Google Play from April 2021 to September 2023. The malware, attributed to the Patchwork APT group, can steal personal data, record phone calls, and intercept messages. Most victims are located in Pakistan and India, with users likely tricked into installing the fake messaging apps via a romance scam. ESET advises users to avoid downloading obscure chat apps recommended by unknown sources, as cybercriminals continue to find ways to infiltrate devices, despite Google Play's efforts to prevent malware.
ESET researchers have uncovered a cyberespionage campaign conducted by the Patchwork APT group, involving twelve Android apps bundled with VajraSpy malware. The apps, disguised as messaging tools and a news app, were distributed on Google Play and other platforms, with over 1,400 downloads. The malware can steal contacts, files, call logs, and SMS messages, and some versions can even extract WhatsApp and Signal messages, record phone calls, and take pictures. The campaign primarily targeted users in Pakistan, likely through targeted romance scams, and has been attributed to the Patchwork APT group.