This app hides in plain sight, records everything you do
What's the story
Cybersecurity experts have recently identified a new mobile spyware, known as LianSpy, that specifically targets Android smartphones.
This malicious software is designed to operate covertly in the background of a user's device, without being visible on the home screen.
It has been found to be particularly active in Russia but its methods could potentially be applied globally.
Modus operandi
LianSpy's stealthy operation and data theft
LianSpy was first detected in March 2024, but evidence suggests it has been operating covertly for at least three years.
Unlike other spyware, this one requires user interaction to fully integrate into their device.
Once activated, it asks for necessary permissions to use overlays, read contacts, and access call logs.
If these permissions are not granted, LianSpy will request them from the user by masquerading as a system application or financial services app.
Information collection
LianSpy's unique approach to data theft
Interestingly, LianSpy does not target banking information. Instead, it focuses on monitoring user activity on their Android device.
The spyware is capable of stealing call logs, sending installed applications to its own servers, and recording a user's screen, without giving any clue to the user.
It operates stealthily in the background using root privileges or superuser permissions that provide the highest level of access to an Android device.
Evasion tactics
LianSpy's evasion of Android security measures
When an app uses the phone's camera or microphone, an alert appears on the staus bar.
However, LianSpy cleverly conceals its activity by exploiting root privileges to bypass the Android system's notification alerts.
This means it can secretly record audio and video without any visible warning to the user.
The spyware is a Trojan malware, meaning it can be delivered onto select Android devices via seemingly authentic files or apps like a software update, email attachment, or a scam app.
Protection measures
How to protect your Android device from spyware
To protect against spyware like LianSpy, users are advised to download apps only from official stores such as Play Store and websites.
However, even these platforms can sometimes be infiltrated by malicious software.
It's recommended that users only download necessary apps from trusted sources such as legitimate companies or brands.
Regularly updating the device's operating systems is also crucial as malware often struggles to adapt to new security features and bug fixes.