DragonDoll Spyware Targets Android Users in 26 Countries

Android users from more than 26 countries, including Russia, have been targeted by a new spyware program called DragonDoll.

Consensus

DragonDoll is a spyware program targeting Android devices.
The malware is disguised as a Google Chrome update.
It spreads through fake websites mimicking official Chrome pages.
Users are prompted to update Chrome, leading to installation of malicious software.
The malware requires special permissions and installs a final spy module.
It enables remote control of the infected device.
It can intercept messages, passwords, PIN codes, and screen content.
It can overlay fake interfaces on real apps to steal user input.
It collects data from messaging apps like Telegram and WhatsApp.
It encrypts stolen data and sends it to servers located on Russian hosting.
The attack affects users in more than 26 countries, including Russia.
Experts recommend installing apps only from official stores like Google Play or RuStore.

DragonDoll is primarily developed for Android and operates in 26 countries including Russia. — vesti
The malware was first detected in March 2027, and the FSB reported a scheme involving international IT corporations for data theft from officials. — vedomosti
Starting March 1, 2027, Russian banks will block transactions if malware is detected on a user's device. — vm
The malware was first discovered in spring during an attack on users in Saudi Arabia. — m24
The malware is referred to as 'Drago…' in the title, suggesting a truncated name. — tg_tass_agency