Back Hackread

New Sturnus Android Malware Reads WhatsApp, Telegram, Signal Chats via Accessibility Abuse

Hackread •Deeba Ahmed • November 21, 2025

Sturnus, an advanced Android banking trojan, has been discovered by ThreatFabric. Learn how this malware bypasses end-to-end encryption on Signal and WhatsApp, steals bank credentials using fake screens, and executes fraudulent transactions.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

WhatsApp Security Flaw Exposes 3.5 Billion Phone Numbers A security flaw in WhatsApp allowed researchers to extract phone numbers of 3.5 billion users. The exploit involved systematically checking numbers through the app's discovery feature, revealing profile photos for 57% and profile text for 29% of accounts. Meta was alerted to the vulnerability in April 2025 and implemented stricter rate-limiting by October 2025. 56 sources 38

Extracted Entities

New Sturnus Android Malware Reads WhatsApp, Telegram, Signal Chats via Accessibility Abuse

The full story

Extracted Entities

Attack Types (2)

Companies (1)

Malware (1)

Platforms (3)