Another spyware maker caught distributing fake Android snooping apps

Researchers identified "Morpheus," a low-cost Android spyware used in a targeted campaign that tricked victims via telecom‑prompted SMS to install a fake phone update app; once installed it abused Android accessibility permissions to exfiltrate data and spoof WhatsApp to add a device via biometric confirmation. Analysis links the campaign to Italian firm IPS through an IP address and Italian-language code fragments, and suggests the attacks targeted political activists in Italy.