Rentable Android spyware uCreater targets WeChat, Telegram and wallets
YingGai hooks sideloaded apps to steal chats, OTPs and wallet data and can spoof camera checks.
68
ProductWeChat
- Mentions · 7d2
- Mentions · 30d2
- All mentions11
- First seenSep 8, 2026
- Last mentioned4d ago
Timeline
11 articles · newest firstuCreator Android spyware steals Telegram 2FA and clones WeChat
The rentable kit hides in sideloaded Telegram and WeChat copies; its code and C2 match Doctor Web’s Baohuo.
68
A Wuhan court just made AI production costs a legal factor in copyright infringement cases
A Wuhan court counted AI token and licensing costs in damages for a copied AI short drama.
46
RatHat Turns Android Accessibility Into an Attack Weapon
Zimperium details RatHat, a China-linked Android trojan abusing Accessibility, wireless debugging, and generative AI to steal banking credentials and persist on phones.
65
RatHat Abuses Android Wireless Debugging to Gain Shell Access and Steal Banking PINs
New Android banking trojan RatHat abuses Wireless Debugging to gain shell access and steals banking PINs and OTPs via raw touch capture.
72
Don't Trust the Super-App: A Case Study of Russia's Max
Researchers show super-apps like Russia's Max can silently capture mini-app UI, storage, network traffic, and authentication, enabling untraceable user impersonation.
48
Researchers Build WeChat Zero-Click Worm Hijacking Phones via Calls
Calif researchers built WeWorm, a zero-click worm exploiting a WeChat VoIP memory-corruption RCE that Tencent has now patched.
62
WeChat worm could pwn a friend before they even answered the call
Calif researchers demoed WeWorm, a zero-click WeChat VoIP memory-corruption worm enabling account takeover; Tencent patched it August 21.
68
WeChat Worm Can Hijack Accounts Without Victims Answering Calls
Researchers demoed WeWorm, a zero-click WeChat worm hijacking accounts via incoming VoIP calls using a memory corruption flaw; Tencent patched it in August.
66
“Zero-click” WeChat worm could hijack accounts and spread via a single call
Researchers discovered a critical memory corruption flaw in WeChat's VoIP stack enabling a zero-click worm, WeWorm, that hijacks accounts via calls; Tencent patched it.
82
WeWorm – First 0-Click Worm Spreading Through WeChat Calls Across iOS and Android
Researchers demonstrated WeWorm, a zero-click worm exploiting a memory-corruption flaw in WeChat's VoIP stack to spread via calls across iOS and Android.
68
Appears with
- Tencentvendor · 5
- Califorganization · 4
- WeWormmalware · 3
- WeWormproduct · 3
- Califvendor · 3
- Tencentorganization · 2
- Alipayproduct · 2
- Weixinproduct · 2
- Zimperiumorganization · 2
- RatHatmalware · 2
- Telegramproduct · 2
- Telegram Xproduct · 1
- Zimperiumvendor · 1
- China-based operatorsthreat actor · 1
- Baleproduct · 1
- Changsha Zhuoqing E-commerceorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.