Russian cybersecurity firm warns of Android spyware targeting users in 26 countries

Positive Technologies, a Russian cybersecurity company, has warned Android users about a new spyware called DragonDoll that is targeting users in more than 26 countries, including Russia. The malware gives attackers near-total control over infected devices and can access a wide range of data, including conversations on messaging apps. According to the company, infection occurs through a fake website that mimics Chrome's official page, prompting users to update their browser. Once installed, DragonDoll allows attackers to turn the screen on and off, record clicks, take screenshots, read messages and use fake interface windows to steal passwords and PIN codes. The program can also access chat content and notifications on Telegram, WhatsApp and Viber, encrypting the collected data before transmitting it to the attacker's server. Positive Technologies described the spyware as a serious threat to mobile users and urged Android users to avoid updating browsers through links from external sources. Russia's Interior Ministry issued a separate warning in June about another malicious program known as Drama RAT.