Sturnus: New Android banking trojan targets WhatsApp, Telegram, and Signal

Securityaffairs.Co •Pierluigi Paganini • November 20, 2025

The Android trojan Sturnus targets communications from secure messaging apps like WhatsApp, Telegram and Signal. Sturnus is a new Android banking trojan with full device-takeover abilities. It bypasses encrypted messaging by capturing on-screen content and can steal banking credentials, remotely control the device, and hide fraudulent actions from the user. ThreatFabric analysis shows Sturnus malware […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

WhatsApp Security Flaw Exposes 3.5 Billion Phone Numbers A security flaw in WhatsApp allowed researchers to extract phone numbers of 3.5 billion users. The exploit involved systematically checking numbers through the app's discovery feature, revealing profile photos for 57% and profile text for 29% of accounts. Meta was alerted to the vulnerability in April 2025 and implemented stricter rate-limiting by October 2025. 56 sources 38

Extracted Entities

Sturnus: New Android banking trojan targets WhatsApp, Telegram, and Signal

The full story

Extracted Entities

Attack Types (2)

Companies (1)

Malware (1)

Platforms (3)