Android Spyware in the UAE Masquerades as ... Spyware

Researchers at ESET uncovered two families of Android spyware, “ToSpy” and “ProSpy,” being distributed in the UAE by masquerading as the ToTok app (and in ProSpy’s case sometimes mimicking Signal). The malware is sideloaded from phishing sites or third‑party stores, requests invasive permissions, exfiltrates contacts, SMS, device information and media files to attacker servers, and perpetuates the ruse by launching or redirecting victims to legitimate apps; campaigns have been active for years, and while technically simple they have been effective against users who sideload apps.