Connect with us

Cybersecurity

Screen-Spying Trojan Exposes Private Chats On Signal, Telegram And WhatsApp

Published

on

Researchers warn of a new Android malware strain, Sturnus, capable of capturing private messages from popular encrypted messaging apps without breaking encryption, highlighting the growing risks of device-level compromise.

Security firm ThreatFabric first identified Sturnus this fall. Initially assumed to be a standard banking trojan, researchers discovered the malware has far broader capabilities, including full device control and the ability to capture sensitive information from apps like Signal, WhatsApp, and Telegram.

Screen-Based Attacks Undermine Encryption

Sturnus does not decrypt or break app-level encryption. Instead, it exploits a fundamental vulnerability of compromised devices: the moment a user reads a message on screen, the malware copies it in real time.

Security analysts stress that this is a classic side-channel attack. “Your encryption may be perfect, but if the device itself is compromised, the screen becomes a window into all sensitive communication,” said Aditya Sood, VP at Aryaka.

The malware leverages Android’s Accessibility Services, designed for users with disabilities, to log conversations, contacts, and message histories. Unlike network-level attacks, this approach bypasses the protections of end-to-end encryption without violating cryptographic boundaries.

A Threat to Organizations as Well as Consumers

While most mobile spyware targets individual users, Sturnus poses risks to businesses and institutions that rely on encrypted messengers for confidential communication. Executives, attorneys, journalists, and activists often use these platforms to exchange sensitive information, and a single compromised device could expose entire conversation threads.

Sturnus appears to spread through deceptive tactics, such as fake software update prompts mimicking legitimate applications like Google Chrome. This social-engineering approach highlights that even simple malware can be highly effective when it exploits user trust.

CISA Issues Warnings About Messaging App Spyware

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) also recently issued an advisory on spyware targeting encrypted messaging platforms. While it did not specifically name Sturnus, the agency highlighted familiar threats:

  • Phishing attacks and malicious QR codes linking accounts to attacker devices.
  • Zero-click exploits requiring no user interaction.
  • Impersonation of trusted messaging apps.

CISA’s guidance emphasizes best practices for users: verify unexpected alerts, avoid untrusted QR codes, limit device linking, and scrutinize authentication requests.

The Bottom Line: Device Security is Critical

ThreatFabric researchers concluded: “From the moment the device is compromised, every sensitive exchange becomes visible to the operator, with no cryptographic protection left to rely on.”

The Sturnus malware underscores a critical truth in cybersecurity: even the strongest encryption cannot protect data on a compromised device. Users and organizations alike must prioritize device security, cautious installation practices, and vigilance against social-engineering attacks.

Continue Reading
Advertisement
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Crime & Law Enforcement

Uttarakhand STF Cracks Major Mule Account Fraud, Three Arrested in Landmark BNS Cybercrime Case

Published

on

By

The Uttarakhand Special Task Force (STF) has successfully dismantled a sophisticated cybercrime network involved in financial fraud through “mule accounts,” arresting three individuals in the state’s first-ever Bharatiya Nyaya Sanhita (BNS) cybercrime case.

The operation, conducted in Haridwar following detailed intelligence and technical analysis, led to the seizure of multiple bank passbooks, chequebooks, debit cards, PAN cards, Aadhaar cards, and forged bank seals used to perpetrate large-scale financial fraud.

Exploitation of Vulnerable Individuals

Authorities revealed that the gang targeted unsuspecting individuals, persuading them to open bank accounts under false pretences. These “mule accounts” were subsequently handed over to organized cybercriminal syndicates to facilitate the transfer of illicit funds across multiple states.

“These accounts enabled the siphoning of lakhs of rupees from victims nationwide,” said a senior STF officer. “The network relied on carefully forged documents and official-looking seals to make the transactions appear legitimate.”

Legal Action Under BNS and IT Act

The three arrested suspects have been charged under Sections 111, 318(4), and 61(2) of the BNS, as well as Section 66D of the Information Technology Act, at Dehradun Cyber Police Station.

“This marks the first instance in Uttarakhand of applying Section 111 of the BNS law in a cybercrime context. The provision targets organized criminal networks and carries penalties of up to 10 years imprisonment,” an STF official explained.

Authorities highlighted that the new legal framework significantly strengthens the state’s ability to prosecute organized digital crime, ensuring that perpetrators face stringent consequences.

Ongoing Investigation and Manhunt

The STF confirmed a continuing investigation to identify additional members of the network. Officers are analyzing digital devices and tracing fund flows to uncover the full extent of the criminal operation.

“This was a well-coordinated interstate network. Our focus is to ensure all responsible parties are held accountable,” a police spokesperson stated. Investigators are also reviewing recruitment tactics used to manipulate innocent individuals into assisting the syndicate.

Expert Advisory for Citizens and Investors

Cybersecurity experts warn that social engineering tactics, such as mule accounts, pose serious financial risks. Prof. Triveni Singh, former IPS officer and cybercrime specialist, emphasized, “Investors and citizens must verify the legitimacy of any request to open accounts. Immediate reporting of suspicious activity can prevent significant losses.”

Authorities urge the public to remain vigilant and cooperate with law enforcement to curb digital fraud. Timely action can protect both personal finances and broader economic security.

STF’s Commitment to Combating Cybercrime

The STF reaffirmed its commitment to combating organized cybercrime through proactive operations, technical intelligence, and inter-state coordination. Officials stressed that legal reforms like the BNS and specialized cyber units are critical in safeguarding citizens’ financial transactions.

“Exploiting innocent people for financial gain will not be tolerated,” said an STF spokesperson. “With public cooperation and continued vigilance, we aim to dismantle such criminal networks entirely.”

Continue Reading

Cybersecurity

India Pulls The Plug On Chinese CCTV Makers Amid New Security Certification Rules

Published

on

By

India will prohibit several Chinese surveillance equipment manufacturers from selling internet-connected CCTV cameras in the country starting April 1, 2026, following the rollout of new certification and cybersecurity compliance rules. The decision aims to strengthen digital security and reduce reliance on foreign technology for critical surveillance infrastructure.

New Certification Rules to Take Effect

Under the updated regulatory framework, all internet-connected CCTV cameras and surveillance equipment must meet strict certification standards before being sold in India. Companies that fail to comply will be barred from selling these devices.

Chinese manufacturers such as Hikvision, Dahua, and TP-Link are directly impacted by this regulation, which prevents them from selling internet-enabled CCTV products unless they meet the new compliance requirements.

The rules are part of a broader government initiative to tighten oversight over surveillance technologies and ensure that equipment meets national security standards.

Security Concerns Driving the Decision

Authorities have raised concerns over vulnerabilities in imported surveillance systems, which could pose risks of unauthorized access, espionage, and exploitation. The certification rules include requirements for hardware origin disclosure and rigorous vulnerability testing to secure surveillance networks, particularly in public infrastructure and government installations.

By mandating certified and trusted equipment, the government aims to safeguard critical digital infrastructure while minimizing cybersecurity risks associated with foreign devices.

Domestic Manufacturers Gain Market Share

With Chinese brands restricted, Indian companies are expected to capture a larger portion of the market. Local manufacturers such as CP Plus and Qubo are poised to benefit from this regulatory shift, accelerating the transition toward domestically compliant surveillance solutions.

Industry estimates indicate that Indian brands have already increased market share following previous certification requirements, and the new rules are expected to reinforce this trend.

Market and Pricing Implications

The exit of major Chinese suppliers from the internet-connected CCTV segment is likely to affect supply chains and lead to price increases due to reduced competition and higher compliance costs.

At the same time, the move is expected to promote domestic manufacturing, strengthen local supply chains, and encourage secure production of surveillance technology. The regulatory shift reflects India’s growing emphasis on cybersecurity, data protection, and trusted technology infrastructure.

Continue Reading

Cybersecurity

Centre Likely To Extend SIM-Binding Deadline For Messaging Platforms Amid Technical Challenges

Published

on

By

The Indian government is expected to extend the implementation deadline for the SIM-binding rule for messaging platforms after technology companies cited technical challenges in compliance. The regulation, part of the country’s broader telecom cybersecurity measures, mandates linking user accounts to active SIM cards to enhance traceability and curb cyber fraud.

What the SIM-Binding Rule Mandates

Under the rule, messaging apps such as WhatsApp, Signal, and Telegram must ensure that accounts are tied to the mobile SIM card used during registration. If a SIM card is removed, replaced, or deactivated, the associated messaging account should cease to function on the device.

Authorities introduced the regulation to improve user identification and prevent misuse of digital communication platforms for cybercrime, impersonation, and financial scams.

Possible Extension of Compliance Timeline

Messaging companies have raised concerns that implementing SIM-binding requires significant technical changes, including:

  • Real-time SIM authentication
  • Device-level verification mechanisms
  • Integration with telecom operator databases

Due to these challenges, officials are reportedly considering extending the deadline to give companies additional time to implement the necessary systems without disrupting services. Telecom authorities and tech platforms are continuing discussions on the timeline and compliance requirements.

Cybersecurity and Traceability Objectives

The SIM-binding rule is part of efforts by the Department of Telecommunications (DoT) to strengthen digital security and traceability. Linking messaging accounts to SIM cards will help law enforcement trace individuals involved in online scams, cyber fraud, and other illegal activities.

India has seen a rise in cybercrime cases through messaging apps, including financial fraud and impersonation scams. SIM-binding is designed to reduce anonymity and improve accountability in the digital communications ecosystem.

Industry Concerns

Technology companies have raised privacy and feasibility concerns, citing the infrastructure and continuous verification required for large-scale implementation. Despite these challenges, government officials emphasize that the rule is intended to protect users and prevent misuse of messaging platforms.

If the extension is granted, companies will have additional time to align their systems with regulatory requirements while maintaining service continuity for users.

This development underscores India’s ongoing efforts to bolster cybersecurity and reduce digital fraud risks in a rapidly expanding communication landscape.

Continue Reading

Trending

Copyright © 2022 420 Reports Marijuana News & Information Website | Reefer News | Cannabis News