It is not rare that users of popular instant messaging services find the official client apps to be lacking in functionality. To address that problem, third-party developers come up with mods that offer sought-after features besides aesthetic upgrades. Unfortunately, some of these mods contain malware alongside legitimate enhancements. A case in point occurred last year when Kaspersky researchers discovered the Triada Trojan inside a WhatsApp mod.
Recently, they described a Telegram mod with an embedded spy module, distributed through Google Play. It is the same story with WhatsApp now: several, previously harmless, mods were found to contain a spy module that Kaspersky researchers detect as Trojan-Spy.AndroidOS.CanesSpy.
Read more…
Source: Kaspersky