logo

New Android spyware Morpheus linked to Italian surveillance firm

ID: 6b37bc3f-028a-5e31-825e-02fe8890c173

STIX ID: report--6b37bc3f-028a-5e31-825e-02fe8890c173

Feed Name: Security Affairs

Threat Score
78/100

Date Published: 2026-04-28

Date Updated: 2026-04-28

Author: Pierluigi Paganini

...
...

Osservatorio Nessuno uncovered 'Morpheus', a sophisticated Android spyware spread via fake update apps and phishing SMS that abuses Accessibility and overlay permissions, enables Wireless Debugging/ADB pairing, disables antivirus protections, persists across reboots, and can record audio/video and exfiltrate data; the report analyzes technical behaviors, infrastructure tied to Italian-hosted domains, and suggests links to an Italian surveillance firm (IPS Intelligence).

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.