The first mobile malware families linked to Russia’s Gamaredon

The Russian cyber-espionage group Gamaredon has developed two new Android spyware tools, marking their first known venture into mobile malware.

These tools are designed to covertly collect sensitive information from infected devices, including contacts, call logs, SMS messages, device location, and files.

The spyware is distributed through malicious APK files, often disguised as legitimate applications to deceive users into installation.

Once installed, the malware operates stealthily, minimizing user suspicion while exfiltrating data to command-and-control servers controlled by Gamaredon.

 

Expert Analysis:

Gamaredon’s expansion into Android spyware signifies a concerning evolution in their cyber-espionage capabilities.

By targeting mobile devices, they gain access to a wealth of personal and organizational data, potentially compromising communications and operational security.

This development underscores the necessity for enhanced mobile security measures and user vigilance against installing applications from untrusted sources.

 

Read the full article here.

Stay informed with us!

You can subscribe to our monthly cybersecurity newsletter to receive updates about us and the industry

Blog

Check the latest updates on threats, stories, events and analysis.

Zurich Wants to Buy Beazley | What It Means for Cyber Insurance and Businesses

Zurich Wants to Buy Beazley. Here’s Why That Matters To Cybersecurity.

Davos Military

Swiss Security on High Alert for Donald Trump’s Visit to Davos Jan 2026

The Hacking of Pornhub | Sensitive Data Leak | ZENDATA News

The Hacking of Pornhub Is a Ticking Time Bomb: Ultra-Sensitive Data of 100 Million Users at Risk