Security experts warn of a new Android malware that can steal money and spy on private chats. Credit : Suttipun, Shutterstock
There’s a new cyber threat spreading quietly across Europe – and experts say it could be one of the most invasive attacks Android users have seen in years. Its name is Sturnus. It doesn’t just want your bank details. It wants access to your private conversations too.
Security researchers have been tracking the malware as it slips into phones through phishing traps – those links that look harmless at first glance but unlock chaos once tapped. Many victims have no idea anything is wrong. Not until they spot strange bank movements… or messages they never wrote.
The first red flag came from ThreatFabric , a cybersecurity team that’s been analysing Sturnus as it evolves. They believe it’s still in its early stages – which is worrying, considering it’s already so capable.
Once Sturnus finds its way into a device, it lies in wait. Then it does two very alarming things:
1- It steals banking credentials It displays fake login screens that look exactly like the real thing. Users type in their details, believing they’re accessing their bank as usual. Criminals collect the keys – and take control.
2- It gives hackers full control of the device Anything you can do, they can do. Every tap, every swipe… Sturnus sees it.
And then comes the part that has experts most concerned.
Millions trust WhatsApp , Telegram and Signal because of the promise of end-to-end encryption. Conversations that no one else can see – not even the app creators.
But encryption only protects messages in transit. Once they appear on your screen, they’re decrypted – and visible.
Sturnus takes advantage of that exact moment.
It doesn’t need to break encryption. It waits for you to unlock the message yourself.
Verification codes. Bank chats. Shared files. Private secrets.
Nothing is private anymore.
Researchers say the malware is being developed and distributed by a private group, not a lone amateur. Its main targets so far appear to be:
Cybercriminals seem to be preparing for a bigger wave of attacks – and Sturnus is already sophisticated enough to:
If this is version one, no one wants to see version two.
Experts strongly advise Android users to:
And if you suspect you’ve been hit? Immediately disconnect from WiFi and mobile data – and call your bank.
Sturnus proves that cybercrime isn’t just evolving – it’s becoming personal. Your money. Your identity. Your private chats. All in the crosshairs of a silent attack you may never see coming.
Stay alert. Your phone is watching – someone else might be too.
Stay tuned with Euro Weekly News for more news Technology
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
