Security Affairs flagged uCreator as an Android spyware platform built on virtualization in Malware Newsletter Round 121. Its tag pages list uCreator as targeting WeChat, Telegram and other messaging applications.
Security Affairs said uCreator is virtualization-based spyware, software that runs outside the standard Android application sandbox. The platform intercepts communications at a deeper level within the operating system. The newsletter described virtualization-based spyware as particularly dangerous since it extends past ordinary app sandbox protections.
Security Affairs said the platform evades many conventional mobile security controls. The newsletter said standard app store vetting struggles to detect uCreator.
Security Affairs placed uCreator under a section titled “Mobile Spyware Reaching New Sophistication.” The newsletter reports on international malware research and incidents, and it flagged uCreator as one of the mobile spyware threats it covers.

Join the discussion