Kaspersky discovers malware disguised as Android apps from carriers can steal your WhatsApp messages

Security firm Kaspersky has discovered a new piece of malware that’s capable of spying on your Android phone like nothing else before it.

The company says that the malware is called Skygofree (named after one of the domains on which it was first spotted), and is usually disguised as a downloadable app on fake sites designed to look like those of mobile carriers, and promises to increase your internet speeds.

Once it’s installed, it can do plenty of damage, including:

• Tracking the device’s location, and record audio at specified locations.

• Connecting an infected device to a Wi-Fi network controlled by the attackers — even if Wi-Fi is disabled by the user — so as to collect and analyze data, such as your browsing history, and the passwords you punch in.

• Read your WhatsApp messages by going through Android’s Accessibility Services.

• Use the front camera to take a picture every time you unlock your phone.

• Intercept calls, SMS messages, calendar entries, and other user data.

Luckily, it doesn’t seem like this malware will affect many devices. You can protect yourself by avoiding installing apps from sources you’re not familiar with (basically, stick with downloading stuff from Google Play), and recent versions of Android will also prevent Skygofree from taking control of many of the aforementioned functions. Just be careful of apps that promise to boost your internet speed for free, it might just be malware.