Source: thehackernews.com
A rentable Android spyware kit named uCreator has been discovered targeting users of Telegram and WeChat by embedding malicious code inside trojanized versions of these popular apps. The spyware spreads through unofficial app stores or via a custom container app created by the kit's developers. Once installed, uCreator can steal Telegram two-factor authentication passwords and clone WeChat accounts. The kit's Telegram-targeting component has been linked to a known backdoor called Baohuo, previously documented by Doctor Web. The campaign represents a significant threat to users who sideload applications outside official marketplaces. The modular, rentable nature of the kit suggests a malware-as-a-service model, lowering the barrier for threat actors to deploy sophisticated mobile espionage tools.
