Skip to content

Threat Actors

Security Affairs flags uCreator Android spyware targeting messaging apps

Security Affairs says uCreator operates outside the Android sandbox and intercepts messages at a deeper operating system layer.

https://breach-signal.com/threat-actors/ucreator-android-spyware-messaging-apps/

Share

Security Affairs flagged uCreator as an Android spyware platform built on virtualization in Malware Newsletter Round 121. Its tag pages list uCreator as targeting WeChat, Telegram and other messaging applications.

Security Affairs said uCreator is virtualization-based spyware, software that runs outside the standard Android application sandbox. The platform intercepts communications at a deeper level within the operating system. The newsletter described virtualization-based spyware as particularly dangerous since it extends past ordinary app sandbox protections.

Security Affairs said the platform evades many conventional mobile security controls. The newsletter said standard app store vetting struggles to detect uCreator.

Security Affairs placed uCreator under a section titled “Mobile Spyware Reaching New Sophistication.” The newsletter reports on international malware research and incidents, and it flagged uCreator as one of the mobile spyware threats it covers.

Was this helpful?

Join the discussion

Please read our Comment Policy before commenting. First-time comments are held for moderation. By posting a comment you agree to our Terms of Use and Privacy Policy, which explain how your name, email address and comment are used.

Your email address will not be published. Required fields are marked *