A new security threat known as Sturnus has been identified by cybersecurity experts, posing a risk to users of WhatsApp, Telegram, and Signal on Android devices. This malicious software, first detected by MTI Security researchers, allows hackers to remotely control devices, enabling them to monitor user activities, intercept messages, and even conduct unauthorized transactions.

Sturnus is particularly concerning as it can bypass encryption on messaging apps, such as WhatsApp, Telegram, and Signal, giving cybercriminals access to sensitive information like banking details and login credentials. Although the extent of infections is currently limited, the potential for widespread impact remains high if hackers find ways to distribute the malware effectively.

According to Threat Fabric, the developers of Sturnus, the trojan possesses advanced capabilities, including overlay-based credential theft, keylogging, screen streaming, and device control, posing a significant threat to financial security and privacy. To mitigate the risk of infection, users are advised to download apps only from the official Google Play Store, avoid sideloading software, and review app ratings before installation.

While Sturnus is a relatively new threat, its sophisticated features highlight the importance of taking proactive measures to safeguard personal data and devices from potential cyber attacks.