Researchers locate Android spyware that can steal WhatsApp messages

Kaspersky said that on the basis of the observed samples and the signatures, it found that the early versions of this Android malware were developed by the end of 2014 and the campaign has remained active ever since.

Indo-Asian News Service
London, Publish Date: Jan 17 2018 2:20PM | Updated Date: Jan 17 2018 2:21PM
Researchers locate Android spyware that can steal WhatsApp messagesFile Photo

Researchers from Russian cyber security company Kaspersky Lab have found an Android spyware that has the ability to steal WhatsApp messages via Accessibility Services and connect an infected device to Wi-Fi networks controlled by cybercriminals.

Dubbed as "Skygofree", the malware is claimed to have been found on malicious websites in Italy and is most likely an offensive security product sold by an Italy-based IT company that markets various surveillance wares, Kaspersky wrote in its official blog Securelist late on Tuesday. 

Kaspersky said that on the basis of the observed samples and the signatures, it found that the early versions of this Android malware were developed by the end of 2014 and the campaign has remained active ever since.

According to tech website Arstechnia, the malware has undergone continuous development since its creation with the latest version having 48 different commands. 

"High-end mobile malware is very difficult to identify and block and the developers behind "Skygofree" have clearly used this to their advantage: creating and evolving an implant that can spy extensively on targets without arousing suspicion," The Telegraph quoted Alexey Firsh, Malware Analyst at Kaspersky, as saying. 

The discovery is concerning because of its ability to record encrypted WhatsApp messages. It is able to do this by tricking an Android feature that was designed to help users with disabilities by making apps more accessible. 

The spyware can read messages displayed on the screen through the Android Accessibility feature, including messages a victim sends on WhatsApp, Kaspersky said.

The spyware relies on several other exploits to gain privileged root access that allows it to bypass key Android security measures. 

"Skygofree" is capable of taking pictures, capturing video and seizing call records, text messages, geolocation data, calendar events and business-related information stored in device memory.

It also includes the ability to automatically record conversations and noise when an infected device enters a location specified by the person operating the malware. The spyware also comes with an ability to recording Skype conversations.

Latest News

  1. Sentry fires in air after observing suspicious movement in Kakapora
  2. Sentry fires in air after observing suspicious movement in Kakapora
  1. Son of BSF trooper dismissed over bad food video found dead in Haryana
  2. Son of BSF trooper dismissed over bad food video found dead in Haryana
  1. India protests Pakistan apex court's order on Gilgit-Baltistan
  2. India protests Pakistan apex court's order on Gilgit-Baltistan
  1. Khardung La avalanche: Governor announces Rs 5 lakh compensation for families of deceased
  2. Khardung La avalanche: Governor announces Rs 5 lakh compensation for families of deceased
  1. Kashmir-bound passengers stranded at Delhi airport, blame carrier for ‘unnecessary delay’
  2. Kashmir-bound passengers stranded at Delhi airport, blame carrier for ‘unnecessary delay’
  1. UNGA president discusses Kashmir with Pakistan FM Qureshi
  2. UNGA president discusses Kashmir with Pakistan FM Qureshi
  1. Abdullahs condole deaths in Khardung La Pass avalanche
  2. Abdullahs condole deaths in Khardung La Pass avalanche
  1. JRL calls shutdown in Gaw Kadal, Handwara, Kupwara areas over massacre anniversaries
  2. JRL calls shutdown in Gaw Kadal, Handwara, Kupwara areas over massacre anniversaries
  1. JeM claims twin grenade attacks in Kashmir
  2. JeM claims twin grenade attacks in Kashmir
  1. Five dead, as many missing as avalanche hits Khardung La in Ladakh
  2. Five dead, as many missing as avalanche hits Khardung La in Ladakh
  1. Army’s ‘remarkable year’ comment over militant killings in Kashmir unfortunate, inhuman: Mirwaiz
  2. Army’s ‘remarkable year’ comment over militant killings in Kashmir unfortunate, inhuman: Mirwaiz
  1. Police nab man stealing from shrine's donation box in Rajouri
  2. Police nab man stealing from shrine's donation box in Rajouri
  1. Militants lob grenade at police camp in south Kashmir’s Shopian
  2. Militants lob grenade at police camp in south Kashmir’s Shopian
  1. Militants lob grenade at CRPF party in Lal Chowk area of Srinagar
  2. Militants lob grenade at CRPF party in Lal Chowk area of Srinagar
  1. Jammu and Kashmir Police issues advisory ahead of R-Day
  2. Jammu and Kashmir Police issues advisory ahead of R-Day
  1. Pakistan SC orders govt to give more rights to people of Gilgit-Baltistan
  2. Pakistan SC orders govt to give more rights to people of Gilgit-Baltistan
  1. Army soldier wounded in explosion near LoC in Rajouri
  2. Army soldier wounded in explosion near LoC in Rajouri
  1. Govt issues J&K GST (Removal of Difficulties) order for e-returns
  2. Govt issues J&K GST (Removal of Difficulties) order for e-returns
  1. Three bodies recovered from Khardung La Pass after snow avalanche
  2. Three bodies recovered from Khardung La Pass after snow avalanche
  1. Forces lay siege to Tral village in south Kashmir
  2. Forces lay siege to Tral village in south Kashmir
  1. New Chief Justice of Pakistan sworn in
  2. New Chief Justice of Pakistan sworn in
  1. Pakistan rules out India's role in Afghan peace process
  2. Pakistan rules out India's role in Afghan peace process
  1. Lolab resident planning to join militancy held with grenade: Kashmir Police
  2. Lolab resident planning to join militancy held with grenade: Kashmir Police
  1. Kashmir Valley braces for heavy snowfall
  2. Kashmir Valley braces for heavy snowfall
  1. Three dead, seven missing as avalanche hits Khardung La Pass in Ladakh
  2. Three dead, seven missing as avalanche hits Khardung La Pass in Ladakh
x
This site uses cookies to deliver our services and to show you relevant news and ads. By using our site, you acknowledge that you have read and understand our Cookie Policy, Privacy Policy, and our Terms of Service.That's Fine