A high-risk Android malware poses a serious threat by targeting banking apps, bypassing screenshot protections through UI reconstruction to steal sensitive financial data. It records live screen activity, captures video, and audio in real time, SMS, Contacts, Call logs, files and silently auto-grants all permissions. Once installed, it takes full control of the device, monitoring every action while staying hidden. Any attempt to uninstall is blocked as it hijacks system dialogs, displays fake full-screen warnings, and locks out users from settings. This stealthy malware ensures deep persistence, making it nearly impossible to remove. This malware is being widely promoted via YouTube and Telegram channels.
Link to the Research Report: https://www.cyfirma.com/research/ghostspy-web-based-android-rat-advanced-persistent-rat-with-stealthy-remote-control-and-uninstall-resistance/

#CyberSecurity #MalwareAlert #StaySafeOnline #CYFIRMA #CYFIRMAResearch#ExternalThreatLandscapeManagement #ETLM

https://www.cyfirma.com/