New LunaSpy Spyware is Targeting Android Users – How to Protect Yourself
1 min read
Summary
Android users are being targeted by a new widespread spyware campaign called Lunascript, which has been active since February this year, according to cyber security firm Kaspersky.
Lunascript disguises itself as an antivirus or a bank protection app and once a user downloads the APK file, it pressures them into giving critical permissions to delete supposedly fake threats.
The spyware then uses the permissions to perform functions such as recording audio and video, reading SMS and browser passwords, and stealing photos.
The campaign is being distributed using messenger apps - particularly within group chats where people might be more trusting and willing to download the unsigned app.
To protect against Lunascript, Android users should steer clear of downloading APK files unless they are from trusted sources and should be very wary of downloading apps via messenger links.
They should also ensure that “Install unknown apps” permissions are switched off, and be very cautious about granting dangerous app permissions - such as access to the microphone or camera - to unknown apps.
Google Play Protect should also be enabled, as this has the capacity to spot unknown or malicious apps.
