Warning: Beware of Android Spyware Disguised as Signal Encryption Plugin and ToTok Pro

Warning: Beware of Android Spyware Disguised as Signal Encryption Plugin and ToTok Pro

Cybersecurity experts have uncovered Android spyware campaigns, ProSpy and ToSpy, that impersonate popular apps like Signal and ToTok to target users in the United Arab Emirates. These malicious apps are distributed through fake websites and social engineering, exfiltrating sensitive data from infected devices. #ToTok #ProSpy

Keypoints

  • ProSpy and ToSpy are Android spyware campaigns targeting UAE users, impersonating legitimate apps like Signal and ToTok.
  • Both spyware strains are distributed via fake websites and social engineering, with no presence in official app stores.
  • The malware requests sensitive permissions and exfiltrates contacts, messages, files, and device information.
  • The campaigns use deceptive buttons and redirect users to legitimate download pages to disguise their malicious intent.
  • Both campaigns employ persistent background services to maintain access, launch after reboots, and evade detection.

Read More: https://thehackernews.com/2025/10/warning-beware-of-android-spyware.html