A new Android spyware called LunaSpy has been spreading since February 2025 via messaging apps, often disguised as antivirus or banking protection tools. Once installed, it fakes scans, requests extensive permissions, and can steal passwords, record audio/video, read texts, track location, and run commands. Data is sent to attackers through about 150 servers, with future updates potentially targeting photos. Experts warn to avoid downloading APKs from messenger links and to delete suspicious apps that demand excessive access.
Source: Android Authority
