PSA: Don’t Install LunaSpy, the Fake Antivirus App Stealing Data

Have you ever received a message from a friend with a link that seemed harmless? Maybe it promised to protect your phone or speed it up. It sounds good, so you click and install the app. But what if that app isn’t what it seems? That’s exactly what happened to many people targeted by a new kind of spyware that hides behind fake antivirus or banking apps.

Stay away from LunaSpy app, which masquerades as antivirus

It’s easy to be fooled by spyware apps. The internet is full of apps pretending to offer protection. According to cybersecurity experts at Kaspersky, a new Android spyware called LunaSpy has been quietly targeting users. It poses as antivirus or banking protection software, but it’s not.

First spotted earlier this year, LunaSpy mainly spreads through messaging apps like Telegram. It often arrives as links sent by family or friends whose accounts may have been hacked. The spyware tricks users by running a fake virus scan and showing alarming alerts about threats on the device. It then asks for broad permissions, claiming they’re needed to fix the issues. Instead of protecting your phone, LunaSpy uses these permissions to spy on you.

Kaspersky’s analysis (via Android Authority) shows LunaSpy can steal passwords saved in browsers and chat apps, record audio and video without your knowledge, read text messages, track your location, and run commands remotely. The latest versions even include hidden code that could soon allow it to steal photos. All stolen data is sent back to attackers through a network of around 150 control servers.

You should always keep the Auto Blocker on your Galaxy phone on!

To stay safe, experts advise against downloading apps from links in messages, since accounts may be compromised. Only download apps from trusted sources like the Play Store or Galaxy Store. Be cautious of any app, especially security-related ones, that requests extensive permissions. If you own a Galaxy phone, make sure Auto Blocker is turned on by going to Settings > Security and privacy > Auto Blocker.