Skip to content
Android users on high alert over new malware that steals your private chats and banking data

Android users on high alert over new malware that steals your private chats and banking data

Irishstar November 23, 2025

Anyone utilizing WhatsApp, Telegram, or Signal on an Android device, such as Samsung's Galaxy series or a Google Pixel handset, should remain extremely vigilant.

A recently uncovered bug, named Sturnus, could potentially endanger millions in the near future, with those affected facing numerous concerning problems, including private conversations being accessed and pilfered.

Security experts at ThreatFabric have recently validated this emerging threat, with the organization stating, "This malware supports a broad range of fraud-related capabilities, including full device takeover. It creates a dangerous threat to victims' financial security and privacy." Initially discovered by MTI Security researchers, this disturbing new Trojan possesses the complete ability to provide cybercriminals with total remote access once a device becomes compromised.

Through this access, malicious actors can monitor everything a user performs on their screen.

They can also darken the phone's display while executing fraudulent activities behind the scenes - meaning the user remains completely unaware that anything suspicious is occurring.

Criminals executing this attack can access incoming and outgoing texts, capture banking information, and pilfer login credentials.

According to ThreatFabric, "The trojan can harvest banking credentials through convincing fake login screens that replicate legitimate banking apps.

In addition, it provides attackers with extensive remote control, enabling them to observe all user activity, inject text without physical interaction, and even black out the device screen while executing fraudulent transactions in the background-without the victim's knowledge.", reports the Express .

"By capturing content directly from the device screen after decryption, Sturnus can monitor communications via WhatsApp, Telegram, and Signal."

Currently, Sturnus appears to remain in its developmental phase and hasn't proliferated worldwide, but that's no excuse for complacency.

Should cybercriminals develop an effective distribution method, the consequences for Android users could be devastating.

Download apps exclusively from the official Google Play Store, refrain from sideloading software, and examine app reviews before installing any new applications.

It's always advisable to verify whether an application's developer maintains a solid reputation and never install an app that arrives through a link or via social media platforms.

Sturnus may be emerging, but its features are already triggering significant alarm bells.

For the latest local news and features on Irish America, visit our homepage here .

Extracted Entities

Attack Types (1)

Companies (1)

Malware (1)