Verge and Signal Plus Messenger may be in for some trouble.
Researchers have discovered malicious Android apps that mimic the popular messenger applications Signal and Telegram.
They’ve also been infecting devices with malware designed to deliver the BadBazaar spyware.
The earlier campaign, active since at least 2018, is notable for the fact that the rogue Android apps were never published to the Play Store.
The details of the apps are as follows – Signal Plus Messenger (org.thoughtcrime.securesmsplus) – 100+ downloads since July 2022, also available via signalplus[.]org Beyond these distribution mechanisms, it’s said that potential victims were also likely tricked into installing the apps from a Uyghur Telegram group focused on sharing Android apps.
Both Signal Plus Messengers and FlyGram are designed to collect and exfiltrate sensitive user data, with each app dedicated to also amassing information from the respective apps they mimic.
👋 Feeling the vibes?
Keep the good energy going by checking out my Amazon affiliate link for some cool finds! 🛍️
If not, consider contributing to my caffeine supply at Buy Me a Coffee ☕️.
Your clicks = cosmic support for more awesome content! 🚀🌈
Leave a Reply