Sophisticated Android Spyware Targets Users in Russia

Researchers at Kaspersky discovered LianSpy, a previously unknown Android post-exploitation spyware used since July 2021 in a targeted espionage campaign likely run by a state-sponsored actor; the malware obtains root (using a modified superuser binary), hides its UI, records screens and harvests call logs and app data, and exfiltrates stolen data via public cloud services (notably Yandex Disk), demonstrating a sophisticated, stealthy capability focused on instant-message and user-activity collection.