A new Android trojan could bypass WhatsApp, Signal and Telegram encryption steal your money

Msn • November 27, 2025

Share: View original

Sturnus, an emerging Android banking trojan, bypasses encryption on messaging apps to capture user credentials. It employs fake login screens and ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

New Android Malware 'Sturnus' Steals Banking Credentials and Encrypted Chats Cybersecurity researchers have identified a new Android banking trojan named Sturnus, capable of stealing banking credentials and accessing encrypted messages from apps like WhatsApp, Telegram, and Signal. The malware operates by capturing on-screen content and can take full control of infected devices, posing a significant risk to users, particularly in Europe. 48 sources 44

Extracted Entities

Attack Types (1)

Malware (1)

Platforms (1)