WhatsApp spy mod spreads through Telegram, attacks Arabic-speaking users

It is not rare that users of popular instant messaging services find the official client apps to be lacking in functionality. To address that problem, third-party developers come up with mods that offer sought-after features besides aesthetic upgrades. Unfortunately, some of these mods contain malware alongside legitimate enhancements. A case in point occurred last year when Kaspersky researchers discovered the Triada Trojan inside a WhatsApp mod.

Recently, they described a Telegram mod with an embedded spy module, distributed through Google Play. It is the same story with WhatsApp now: several, previously harmless, mods were found to contain a spy module that Kaspersky researchers detect as Trojan-Spy.AndroidOS.CanesSpy.

Read more…
Source: Kaspersky