Story perspectives

New Sturnus Malware Exposes Encrypted Messages on Android

11/25/2025

33 6

Summary

Story summary

The Sturnus malware threatens Android users by bypassing the encryption of Signal, Telegram, and WhatsApp.
ThreatFabric security researchers have confirmed that Sturnus can capture messages after they are decrypted and displayed.
The malware uses plaintext, RSA, and AES-encrypted communication, making it difficult to detect.
Experts warn that once a device is compromised, all sensitive exchanges become visible to hackers.
Users should keep Google Play Protect activated and avoid unauthorized app stores.

1 of 1

Story summary

The Sturnus malware threatens Android users by bypassing the encryption of Signal, Telegram, and WhatsApp.
ThreatFabric security researchers have confirmed that Sturnus can capture messages after they are decrypted and displayed.
The malware uses plaintext, RSA, and AES-encrypted communication, making it difficult to detect.
Experts warn that once a device is compromised, all sensitive exchanges become visible to hackers.
Users should keep Google Play Protect activated and avoid unauthorized app stores.