uCreator: virtualization-based Android spyware platform targeting WeChat, Telegram and other messaging apps

uCreater (the vendor’s own name for the product is YingGai) is a commercial Android surveillance platform built around 群控 (“mass control”). Branded through packages in the com.ucreator.* namespace, it is not a single malware family but a productized framework: a VirtualApp/LSPatch engine, a library of per-application hook modules, a Redis and HTTP control plane, a cloud-phone farm for live screen control, and a Windows operator console. Customers can rent the platform and deploy its capabilities against different applications on a target device. Despite this breadth and multi year usage, I found little public threat reporting documenting the platform’s architecture. submitted by /u/0x0v1 [link] [comments]Technical Information Security Content & DiscussionRead More