uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat Accounts

A type of Android spyware known as uCreator can gain control of Telegram and WeChat accounts by disguising its code within functional copies of these apps. This spyware is spread through tampered app copies that are distributed outside of official app stores or through a container app created by the kit's makers. The uCreator kit can specifically target users who install these modified apps or run WeChat within the container app. The Telegram component of the uCreator kit has been linked to a backdoor known as Baohuo. The spyware has the capability to steal Telegram 2FA passwords and clone WeChat accounts. It is installed on devices through unofficial means, posing a risk to users who download apps from outside the official stores.