A virus has been detected that controls Android through accessibility features and bypasses messenger protections
MTI Security specialists have discovered a new type of malicious software called Sturnus, which is capable of accessing the interface of Android smartphones and monitoring user actions.
ThePublic.info, citing Android Authority, reports that the virus disguises itself as system applications or Android updates and uses accessibility features to take control of the device.
Sturnus is capable of:
-
intercepting screen content;
-
reading messages from messengers, even if they are encrypted;
-
recording button presses and password entries;
-
overlaying fake login screens on banking applications to steal financial data.
The threat spreads through the installation of APK files outside of Google Play, making users particularly vulnerable.
The virus is primarily detected in Central and Southern European countries. Google states that there are no infected applications in the Play Store, but experts warn that Sturnus is already actively spreading outside the official store.
