Kaspersky: Malware disguised as Android apps from carriers can steal your WhatsApp messages

Kaspersky: Malware disguised as Android apps from carriers can steal your WhatsApp messages

Security firm Kaspersky has discovered a new piece of malware doing the rounds that’s capable of spying on your Android phone like nothing else before it.

The company says that the malware is called Skygofree (named after one of the domains on which it was first spotted), and is usually disguised as a downloadable app on fake sites designed to resemble those of mobile carriers, and promises to increase your internet speeds. Once it’s installed, it can do plenty of damage, including:

  • Tracking the device’s location, and record audio at specified locations.
  • Connecting an infected device to a Wi-Fi network controlled by the attackers — even if Wi-Fi is disabled by the user — so as to collect and analyze data, such as your browsing history, and the passwords you punch in.
  • Read your WhatsApp messages by going through Android’s Accessibility Services.
  • Use the front-facing camera to take a picture every time you unlock your phone.
  • Intercept calls, SMS messages, calendar entries, and other user data.

Thankfully, it doesn’t seem like this malware will affect many devices. You can protect yourself by avoiding installing apps from sources you’re not familiar with (basically, stick with downloading stuff from Google Play), and recent versions of Android will also prevent Skygofree from taking control of many of the aforementioned functions. Just be wary of apps that promise to boost your internet speed for free.

Read next: Hike brings payments, news, and messaging to basic Android phones without mobile data

Corona coverage

Read our daily coverage on how the tech industry is responding to the coronavirus and subscribe to our weekly newsletter Coronavirus in Context.

For tips and tricks on working remotely, check out our Growth Quarters articles here or follow us on Twitter.