uCreator Android Spyware Exploits Telegram and WeChat Vulnerabilities for Account Compromise

uCreator, a rentable Android spyware kit, exploits vulnerabilities in tampered Telegram and WeChat app copies to steal 2FA credentials and clone accounts. The malware targets users who install unofficial app versions or use containerized WeChat environments.

A rentable Android spyware kit called uCreator takes over Telegram and WeChat accounts by hiding its code inside working copies of the two apps, researcher Ovi found. It only reaches people who install one of these tampered copies, spread outside the official app stores, or who run WeChat inside the kit makers' own container app.

The kit's Telegram part matches Baohuo, a backdoor that Doctor

Read original article