uCreator Android spyware steals Telegram 2FA and clones WeChat
The rentable kit hides in sideloaded Telegram and WeChat copies; its code and C2 match Doctor Web’s Baohuo.
68
Product
Onion Box
- Mentions · 7d1
- Mentions · 30d1
- All mentions1
- First seenOct 26, 2026
- Last mentioned4d ago
Timeline
1 articles · newest firstAppears with
- uCreatormalware · 1
- WeChatproduct · 1
- Baohuomalware · 1
- Telegram Xproduct · 1
- Telegramproduct · 1
- Doctor Weborganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.