Sophisticated Android Spyware Targets Users in Russia

Researchers have discovered a fresh mobile spyware tool named LianSpy that has been spying on Android users for the past three years, mainly focusing on targets in Russia. The threat actor, likely state-sponsored, is delivering the malware disguised as system or financial apps. The spyware, dependent on user interaction, intercepts call logs, records screen activity, and enumerates installed apps, using public cloud platforms to store harvested data. LianSpy uses root privileges to go unnoticed by security solutions and employs encryption methods that make victim identification impossible.