Fake Signal and Telegram apps unleash China-backed spyware on Android devices

Malicious versions of the Signal and Telegram Android apps have been discovered on the Google Play Store and Samsung Galaxy Store, with the intention of delivering the China-linked "BadBazaar" spyware, according to cybersecurity researchers. The tainted Signal and Telegram apps, called 'Signal Plus Messenger' and 'FlyGram,' have been actively in use since July 2020 and July 2022, respectively. Signal Plus Messenger collects similar device data and sensitive information, but its primary goal is to spy on Signal communications. "Both Signal Plus Messenger and FlyGram are slightly different variants of BadBazaar that focus on user data exfiltration and espionage.