Experts are warning Android users about a new spyware app called DragonDoll that is targeting their phones.
Android users in more than 26 countries, including Russia, have been targeted by the new DragonDoll spyware, according to the Russian news agency RIA Novosti, citing experts at Positive Technologies.
The company said in a statement: "DragonDoll gives hackers near-total control over the victim's device and steals data, including messaging app conversations."
The agency explained that the infection occurs through a fake website that mimics the official Chrome browser page, where the user is asked to "update" the browser, after which he installs the malicious software on his device.
Once installed, the malware allows hackers to control the compromised device, enabling them to turn the screen on and off, record clicks, take screenshots, read messages, and intercept passwords and PINs through fake interface windows. The program can also read chat lists and contacts in Telegram, WhatsApp, and Viber, and intercept the content of pop-up notifications. The collected data is encrypted and sent to the attackers' server.
It is worth noting that the Russian Interior Ministry warned last June that scammers had begun using a new malware program called Drama RAT to steal data and lock Android phones. The criminals distribute this program via messaging apps, text messages, and email, promising free access to ChatGPT and Yandex.Music, as well as a new VPN. The scammers also send the program disguised as files such as "tax returns" and "payment invoices."
