New Sturnus Banking Trojan Targets WhatsApp, Telegram, Signal Messages

Back Securityweek

New Sturnus Banking Trojan Targets WhatsApp, Telegram, Signal Messages

Securityweek • November 20, 2025

Share: View original

New Android banking trojan Sturnus is designed to target secure messaging applications such as WhatsApp, Telegram, and Signal.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

WhatsApp Security Flaw Exposes 3.5 Billion Phone Numbers A security flaw in WhatsApp allowed researchers to extract phone numbers of 3.5 billion users. The exploit involved systematically checking numbers through the app's discovery feature, revealing profile photos for 57% and profile text for 29% of accounts. Meta was alerted to the vulnerability in April 2025 and implemented stricter rate-limiting by October 2025. 56 sources 38

Extracted Entities

Attack Types (2)

Companies (1)

Malware (1)

Platforms (3)

Android Telegram WhatsApp