‘StrongPity’ hackers created fake video-chat app to spy on users

Suspected nation-state hackers from the StrongPity group have created a malicious Android video chat app that can record users’ phone calls, collect SMS messages, and steal data from dozens of mobile apps, according to new research.

Hackers distributed the malicious app through a website impersonating a real video-chat service called Shagle, which provides encrypted communications between strangers, according to the Slovakia-based cybersecurity company ESET. The real Shagle, however, is entirely web-based and has no official app. 

The fake app …

android app apps called chat collect communications cybersecurity cybersecurity company data distributed encrypted eset fake hackers impersonating malicious messages mobile mobile apps nation nation-state hackers phone phone calls research service shagle slovakia sms sms messages spy state steal strongpity video website