{"id":133909,"date":"2025-11-20T14:18:17","date_gmt":"2025-11-20T14:18:17","guid":{"rendered":"https:\/\/cybersecuritynews.com\/?p=133909"},"modified":"2025-11-20T14:18:23","modified_gmt":"2025-11-20T14:18:23","slug":"sturnus-banking-malware-steals-communications-from-signal-and-whatsapp","status":"publish","type":"post","link":"https:\/\/cybersecuritynews.com\/sturnus-banking-malware-steals-communications-from-signal-and-whatsapp\/","title":{"rendered":"Sturnus Banking Malware Steals Communications from Signal and WhatsApp, Gaining Full Control of The Device"},"content":{"rendered":"\n<p>A new banking malware called Sturnus has emerged as a significant threat to mobile users across Europe.<\/p>\n\n\n\n<p>Security researchers have discovered that this sophisticated Android trojan can capture encrypted messages from popular messaging apps like WhatsApp, Telegram, and Signal by accessing content directly from the device screen after decryption.<\/p>\n\n\n\n<p>The malware&#8217;s ability to monitor these communications marks a serious advancement in mobile banking threats, combining credential theft with extensive remote access capabilities.<\/p>\n\n\n\n<p>The malware operates by harvesting banking credentials through convincing fake login screens that perfectly replicate legitimate banking applications.<\/p>\n\n\n\n<p>What makes Sturnus particularly dangerous is its capacity to provide attackers with full device takeover, allowing them to observe all user activity without physical interaction.<\/p>\n\n\n\n<p>Attackers can inject text messages, intercept communications, and even black out the device screen while conducting fraudulent transactions in the background, leaving victims completely unaware of the theft occurring on their compromised devices.<\/p>\n\n\n\n<p>Threat Fabric security analysts <a href=\"https:\/\/www.threatfabric.com\/blogs\/sturnus-banking-trojan-bypassing-whatsapp-telegram-and-signal\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">identified<\/a> Sturnus as a privately operated trojan currently in its early testing phase, with targeted campaigns already configured against financial institutions across Southern and Central Europe.<\/p>\n\n\n\n<p>Although the malware remains in limited deployment, researchers emphasize that Sturnus is fully functional and more advanced than several established malware families in certain aspects, particularly regarding its communication protocol and device support capabilities.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" src=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEh5lntZPlh3MZzfQV77_c_gPdz6azpicfAEZ4wwOizb26VlluJvAoZjbFZTTFd2DCvSaYt7RFHRTmniI2d3m_uj3mO28B_ZI1xY_kKeJ_5xhgvvzKmGb-wfj8qlYXsNi6BYHohaeNFWzHGFh_maLYp2chfaH20_3ZFvgf0u34xttXw8E-Pv-Q-nC4sB6HE\/s16000\/Early%20stages%20(Source%20-%20Threat%20Fabric).webp\" alt=\"Early stages (Source - Threat Fabric)\" \/><figcaption class=\"wp-element-caption\">Early stages (Source &#8211; Threat Fabric)<\/figcaption><\/figure><\/div>\n\n\n<p>This combination of sophisticated features and targeted geographic focus suggests attackers are refining their tools before launching broader operations.<\/p>\n\n\n\n<p>The current threat landscape indicates that Sturnus.A operates with region-specific targeting, using tailored overlay templates designed for Southern and Central European victims.<\/p>\n\n\n\n<p>The malware&#8217;s operators demonstrate clear focus on compromising <a href=\"https:\/\/cybersecuritynews.com\/telegram-know-secure-messaging\/\" target=\"_blank\" rel=\"noreferrer noopener\">secure messaging<\/a> platforms, testing the trojan&#8217;s ability to capture sensitive communications across different environments.<\/p>\n\n\n\n<p>The relatively few samples detected so far, combined with short intermittent <a href=\"https:\/\/cybersecuritynews.com\/incorporating-cybersec-credentials-into-marketing-campaigns\/\" target=\"_blank\" rel=\"noreferrer noopener\">campaigns<\/a> rather than sustained large-scale activity, indicate the operation remains in evaluation and tuning phases.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-understanding-the-communication-protocol\"><strong>Understanding the Communication Protocol<\/strong><\/h2>\n\n\n\n<p>The malware&#8217;s complex communication structure inspired its name, drawing parallels to the Sturnus vulgaris bird, whose rapid and irregular chatter jumps between whistles, clicks, and imitations.<\/p>\n\n\n\n<p>Sturnus mirrors this chaotic pattern through its layered mix of plaintext, RSA, and AES communications that switch unpredictably between simple and complex messages.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" src=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEgls8IYfosZod2vitFC6E2xuikyzSCSj1zqRPncFjDm2aAorvQtE3azbCzRoHMuID3ZgU-GUMkRw5pQB7EJfTc7xlSrl-veE9i6DzzMnNeBY82Zd3HMz6DCjO724ZdTF0lLR1VBykyn7x_VgYi6K4IONtUinWjzJFC6fH4TI9NnuDl4EE_gU82UWlyUwHw\/s16000\/Capabilities%20(Source%20-%20Threat%20Fabric).webp\" alt=\"Capabilities (Source - Threat Fabric)\" \/><figcaption class=\"wp-element-caption\">Capabilities (Source &#8211; Threat Fabric)<\/figcaption><\/figure><\/div>\n\n\n<p>The malware establishes a connection with its command-and-control server using both WebSocket (WSS) and HTTP channels, transmitting a combination of encrypted and plaintext data primarily over WebSocket connections.<\/p>\n\n\n\n<p>The technical handshake begins with an HTTP POST request where the <a href=\"https:\/\/cybersecuritynews.com\/chatgpt-powered-malware-analysis\/\" target=\"_blank\" rel=\"noreferrer noopener\">malware<\/a> registers the device using a placeholder payload. The server responds with a UUID client identifier and an RSA public key.<\/p>\n\n\n\n<p>The malware then generates a 256-bit AES key locally, encrypts it using RSA\/ECB\/OAEPWithSHA-1AndMGF1Padding, and transmits the encrypted key back while storing the plaintext <a href=\"https:\/\/cybersecuritynews.com\/threat-actors-leveraging-aes-cryptography\/\" target=\"_blank\" rel=\"noreferrer noopener\">AES<\/a> key on the device in Base64 format.<\/p>\n\n\n\n<p>Once key exchange completes, all subsequent communication receives protection through AES\/CBC\/PKCS5Padding with a 256-bit encryption key.<\/p>\n\n\n\n<p>The trojan generates fresh 16-byte initialization vectors for each message, prepends them to encrypted payloads, and wraps results in custom binary protocols containing message type headers, message length data, and client UUIDs.<\/p>\n\n\n\n<p>This sophisticated encryption scheme demonstrates the developers&#8217; expertise in secure communications while maintaining malicious functionality.<\/p>\n\n\n\n<p class=\"has-text-align-center has-background\" style=\"background:linear-gradient(180deg,rgb(238,238,238) 91%,rgb(169,184,195) 100%)\"><strong>Follow us on\u00a0<a href=\"https:\/\/news.google.com\/publications\/CAAqMggKIixDQklTR3dnTWFoY0tGV041WW1WeWMyVmpkWEpwZEhsdVpYZHpMbU52YlNnQVAB?hl=en-IN&amp;gl=IN&amp;ceid=IN:en\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Google News<\/a>,\u00a0<a href=\"https:\/\/www.linkedin.com\/company\/cybersecurity-news\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">LinkedIn<\/a>,\u00a0and\u00a0<a href=\"https:\/\/x.com\/cyber_press_org\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">X<\/a>\u00a0to Get More Instant Updates<\/strong>,\u00a0<strong>Set CSN as a Preferred Source in\u00a0<a href=\"https:\/\/www.google.com\/preferences\/source?q=cybersecuritynews.com\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Google<\/a>.<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"<p>A new banking malware called Sturnus has emerged as a significant threat to mobile users across Europe. Security researchers have discovered that this sophisticated Android trojan can capture encrypted messages from popular messaging apps like WhatsApp, Telegram, and Signal by accessing content directly from the device screen after decryption. The malware&#8217;s ability to monitor these [&hellip;]<\/p>\n","protected":false},"author":6,"featured_media":133935,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEi8Tr2duTAZG5gCbPNo1lnHNaw4xoaZuh_FfUMaAgS0x2z45gjslc_ywJvMng_4s7lLGKOq34Raxnb-97kNx4_ek-patZYYlKDzjZH-a-1kSZOkOsuWtTMX9U3JSy6sMS5wgk3gbVPQWX1oxh6RtVGM_1rtobUdeND7luIaoEM6QNMYOpdk037S7EI44FI\/s16000\/Sturnus%20Banking%20Malware%20Steals%20Communications%20from%20Signal%20and%20WhatsApp,%20Gaining%20Full%20Control%20of%20The%20Device.webp","fifu_image_alt":"","_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[11,48],"tags":[149,151],"class_list":{"0":"post-133909","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-cyber-security-news","8":"category-threats","9":"tag-cyber-security","10":"tag-cyber-security-news"},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v25.7.1 (Yoast SEO v25.7) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Sturnus Banking Malware Steals Communications from Signal and WhatsApp, Gaining Full Control of The Device<\/title>\n<meta name=\"description\" content=\"Sturnus, a new Android banking trojan in Europe, steals bank credentials and captures decrypted WhatsApp, Telegram, and Signal messages.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cybersecuritynews.com\/sturnus-banking-malware-steals-communications-from-signal-and-whatsapp\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Sturnus Banking Malware Steals Communications from Signal and WhatsApp, Gaining Full Control of The Device\" \/>\n<meta property=\"og:description\" content=\"Sturnus, a new Android banking trojan in Europe, steals bank credentials and captures decrypted WhatsApp, Telegram, and Signal messages.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cybersecuritynews.com\/sturnus-banking-malware-steals-communications-from-signal-and-whatsapp\/\" \/>\n<meta property=\"og:site_name\" content=\"Cyber Security News\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/Hackingtutorialsandnews\" \/>\n<meta property=\"article:published_time\" content=\"2025-11-20T14:18:17+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-11-20T14:18:23+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEi8Tr2duTAZG5gCbPNo1lnHNaw4xoaZuh_FfUMaAgS0x2z45gjslc_ywJvMng_4s7lLGKOq34Raxnb-97kNx4_ek-patZYYlKDzjZH-a-1kSZOkOsuWtTMX9U3JSy6sMS5wgk3gbVPQWX1oxh6RtVGM_1rtobUdeND7luIaoEM6QNMYOpdk037S7EI44FI\/s16000\/Sturnus%20Banking%20Malware%20Steals%20Communications%20from%20Signal%20and%20WhatsApp,%20Gaining%20Full%20Control%20of%20The%20Device.webp\" \/><meta property=\"og:image\" content=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEi8Tr2duTAZG5gCbPNo1lnHNaw4xoaZuh_FfUMaAgS0x2z45gjslc_ywJvMng_4s7lLGKOq34Raxnb-97kNx4_ek-patZYYlKDzjZH-a-1kSZOkOsuWtTMX9U3JSy6sMS5wgk3gbVPQWX1oxh6RtVGM_1rtobUdeND7luIaoEM6QNMYOpdk037S7EI44FI\/s16000\/Sturnus%20Banking%20Malware%20Steals%20Communications%20from%20Signal%20and%20WhatsApp,%20Gaining%20Full%20Control%20of%20The%20Device.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1600\" \/>\n\t<meta property=\"og:image:height\" content=\"900\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Tushar Subhra Dutta\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEi8Tr2duTAZG5gCbPNo1lnHNaw4xoaZuh_FfUMaAgS0x2z45gjslc_ywJvMng_4s7lLGKOq34Raxnb-97kNx4_ek-patZYYlKDzjZH-a-1kSZOkOsuWtTMX9U3JSy6sMS5wgk3gbVPQWX1oxh6RtVGM_1rtobUdeND7luIaoEM6QNMYOpdk037S7EI44FI\/s16000\/Sturnus%20Banking%20Malware%20Steals%20Communications%20from%20Signal%20and%20WhatsApp,%20Gaining%20Full%20Control%20of%20The%20Device.webp\" \/>\n<meta name=\"twitter:creator\" content=\"@The_Cyber_News\" \/>\n<meta name=\"twitter:site\" content=\"@The_Cyber_News\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Tushar Subhra Dutta\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Sturnus Banking Malware Steals Communications from Signal and WhatsApp, Gaining Full Control of The Device","description":"Sturnus, a new Android banking trojan in Europe, steals bank credentials and captures decrypted WhatsApp, Telegram, and Signal messages.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cybersecuritynews.com\/sturnus-banking-malware-steals-communications-from-signal-and-whatsapp\/","og_locale":"en_US","og_type":"article","og_title":"Sturnus Banking Malware Steals Communications from Signal and WhatsApp, Gaining Full Control of The Device","og_description":"Sturnus, a new Android banking trojan in Europe, steals bank credentials and captures decrypted WhatsApp, Telegram, and Signal messages.","og_url":"https:\/\/cybersecuritynews.com\/sturnus-banking-malware-steals-communications-from-signal-and-whatsapp\/","og_site_name":"Cyber Security News","article_publisher":"https:\/\/www.facebook.com\/Hackingtutorialsandnews","article_published_time":"2025-11-20T14:18:17+00:00","article_modified_time":"2025-11-20T14:18:23+00:00","og_image":[{"url":"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEi8Tr2duTAZG5gCbPNo1lnHNaw4xoaZuh_FfUMaAgS0x2z45gjslc_ywJvMng_4s7lLGKOq34Raxnb-97kNx4_ek-patZYYlKDzjZH-a-1kSZOkOsuWtTMX9U3JSy6sMS5wgk3gbVPQWX1oxh6RtVGM_1rtobUdeND7luIaoEM6QNMYOpdk037S7EI44FI\/s16000\/Sturnus%20Banking%20Malware%20Steals%20Communications%20from%20Signal%20and%20WhatsApp,%20Gaining%20Full%20Control%20of%20The%20Device.webp","type":"","width":"","height":""},{"width":1600,"height":900,"url":"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEi8Tr2duTAZG5gCbPNo1lnHNaw4xoaZuh_FfUMaAgS0x2z45gjslc_ywJvMng_4s7lLGKOq34Raxnb-97kNx4_ek-patZYYlKDzjZH-a-1kSZOkOsuWtTMX9U3JSy6sMS5wgk3gbVPQWX1oxh6RtVGM_1rtobUdeND7luIaoEM6QNMYOpdk037S7EI44FI\/s16000\/Sturnus%20Banking%20Malware%20Steals%20Communications%20from%20Signal%20and%20WhatsApp,%20Gaining%20Full%20Control%20of%20The%20Device.webp","type":"image\/jpeg"}],"author":"Tushar Subhra Dutta","twitter_card":"summary_large_image","twitter_image":"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEi8Tr2duTAZG5gCbPNo1lnHNaw4xoaZuh_FfUMaAgS0x2z45gjslc_ywJvMng_4s7lLGKOq34Raxnb-97kNx4_ek-patZYYlKDzjZH-a-1kSZOkOsuWtTMX9U3JSy6sMS5wgk3gbVPQWX1oxh6RtVGM_1rtobUdeND7luIaoEM6QNMYOpdk037S7EI44FI\/s16000\/Sturnus%20Banking%20Malware%20Steals%20Communications%20from%20Signal%20and%20WhatsApp,%20Gaining%20Full%20Control%20of%20The%20Device.webp","twitter_creator":"@The_Cyber_News","twitter_site":"@The_Cyber_News","twitter_misc":{"Written by":"Tushar Subhra Dutta","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/cybersecuritynews.com\/sturnus-banking-malware-steals-communications-from-signal-and-whatsapp\/#article","isPartOf":{"@id":"https:\/\/cybersecuritynews.com\/sturnus-banking-malware-steals-communications-from-signal-and-whatsapp\/"},"author":{"name":"Tushar Subhra Dutta","@id":"https:\/\/cybersecuritynews.com\/#\/schema\/person\/7eb7d8d026aa5dd566f134d4def5c05c"},"headline":"Sturnus Banking Malware Steals Communications from Signal and WhatsApp, Gaining Full Control of The Device","datePublished":"2025-11-20T14:18:17+00:00","dateModified":"2025-11-20T14:18:23+00:00","mainEntityOfPage":{"@id":"https:\/\/cybersecuritynews.com\/sturnus-banking-malware-steals-communications-from-signal-and-whatsapp\/"},"wordCount":567,"publisher":{"@id":"https:\/\/cybersecuritynews.com\/#organization"},"image":{"@id":"https:\/\/cybersecuritynews.com\/sturnus-banking-malware-steals-communications-from-signal-and-whatsapp\/#primaryimage"},"thumbnailUrl":"https:\/\/i3.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEi8Tr2duTAZG5gCbPNo1lnHNaw4xoaZuh_FfUMaAgS0x2z45gjslc_ywJvMng_4s7lLGKOq34Raxnb-97kNx4_ek-patZYYlKDzjZH-a-1kSZOkOsuWtTMX9U3JSy6sMS5wgk3gbVPQWX1oxh6RtVGM_1rtobUdeND7luIaoEM6QNMYOpdk037S7EI44FI\/s16000\/Sturnus%20Banking%20Malware%20Steals%20Communications%20from%20Signal%20and%20WhatsApp,%20Gaining%20Full%20Control%20of%20The%20Device.webp?w=1600&resize=1600,900&ssl=1","keywords":["cyber security","cyber security news"],"articleSection":["Cyber Security News","Threats"],"inLanguage":"en-US","copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/cybersecuritynews.com\/#organization"}},{"@type":"WebPage","@id":"https:\/\/cybersecuritynews.com\/sturnus-banking-malware-steals-communications-from-signal-and-whatsapp\/","url":"https:\/\/cybersecuritynews.com\/sturnus-banking-malware-steals-communications-from-signal-and-whatsapp\/","name":"Sturnus Banking Malware Steals Communications from Signal and WhatsApp, Gaining Full Control of The Device","isPartOf":{"@id":"https:\/\/cybersecuritynews.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cybersecuritynews.com\/sturnus-banking-malware-steals-communications-from-signal-and-whatsapp\/#primaryimage"},"image":{"@id":"https:\/\/cybersecuritynews.com\/sturnus-banking-malware-steals-communications-from-signal-and-whatsapp\/#primaryimage"},"thumbnailUrl":"https:\/\/i3.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEi8Tr2duTAZG5gCbPNo1lnHNaw4xoaZuh_FfUMaAgS0x2z45gjslc_ywJvMng_4s7lLGKOq34Raxnb-97kNx4_ek-patZYYlKDzjZH-a-1kSZOkOsuWtTMX9U3JSy6sMS5wgk3gbVPQWX1oxh6RtVGM_1rtobUdeND7luIaoEM6QNMYOpdk037S7EI44FI\/s16000\/Sturnus%20Banking%20Malware%20Steals%20Communications%20from%20Signal%20and%20WhatsApp,%20Gaining%20Full%20Control%20of%20The%20Device.webp?w=1600&resize=1600,900&ssl=1","datePublished":"2025-11-20T14:18:17+00:00","dateModified":"2025-11-20T14:18:23+00:00","description":"Sturnus, a new Android banking trojan in Europe, steals bank credentials and captures decrypted WhatsApp, Telegram, and Signal messages.","breadcrumb":{"@id":"https:\/\/cybersecuritynews.com\/sturnus-banking-malware-steals-communications-from-signal-and-whatsapp\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cybersecuritynews.com\/sturnus-banking-malware-steals-communications-from-signal-and-whatsapp\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cybersecuritynews.com\/sturnus-banking-malware-steals-communications-from-signal-and-whatsapp\/#primaryimage","url":"https:\/\/i3.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEi8Tr2duTAZG5gCbPNo1lnHNaw4xoaZuh_FfUMaAgS0x2z45gjslc_ywJvMng_4s7lLGKOq34Raxnb-97kNx4_ek-patZYYlKDzjZH-a-1kSZOkOsuWtTMX9U3JSy6sMS5wgk3gbVPQWX1oxh6RtVGM_1rtobUdeND7luIaoEM6QNMYOpdk037S7EI44FI\/s16000\/Sturnus%20Banking%20Malware%20Steals%20Communications%20from%20Signal%20and%20WhatsApp,%20Gaining%20Full%20Control%20of%20The%20Device.webp?w=1600&resize=1600,900&ssl=1","contentUrl":"https:\/\/i3.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEi8Tr2duTAZG5gCbPNo1lnHNaw4xoaZuh_FfUMaAgS0x2z45gjslc_ywJvMng_4s7lLGKOq34Raxnb-97kNx4_ek-patZYYlKDzjZH-a-1kSZOkOsuWtTMX9U3JSy6sMS5wgk3gbVPQWX1oxh6RtVGM_1rtobUdeND7luIaoEM6QNMYOpdk037S7EI44FI\/s16000\/Sturnus%20Banking%20Malware%20Steals%20Communications%20from%20Signal%20and%20WhatsApp,%20Gaining%20Full%20Control%20of%20The%20Device.webp?w=1600&resize=1600,900&ssl=1","width":"1600","height":"900"},{"@type":"BreadcrumbList","@id":"https:\/\/cybersecuritynews.com\/sturnus-banking-malware-steals-communications-from-signal-and-whatsapp\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cybersecuritynews.com\/"},{"@type":"ListItem","position":2,"name":"Sturnus Banking Malware Steals Communications from Signal and WhatsApp, Gaining Full Control of The Device"}]},{"@type":"WebSite","@id":"https:\/\/cybersecuritynews.com\/#website","url":"https:\/\/cybersecuritynews.com\/","name":"Cyber Security News","description":"World&#039;s #1 Premier Cybersecurity and Hacking News Portal","publisher":{"@id":"https:\/\/cybersecuritynews.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cybersecuritynews.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/cybersecuritynews.com\/#organization","name":"Cyber Security News","url":"https:\/\/cybersecuritynews.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cybersecuritynews.com\/#\/schema\/logo\/image\/","url":"https:\/\/cybersecuritynews.com\/wp-content\/uploads\/2021\/06\/Cyber-security.jpg","contentUrl":"https:\/\/cybersecuritynews.com\/wp-content\/uploads\/2021\/06\/Cyber-security.jpg","width":200,"height":200,"caption":"Cyber Security News"},"image":{"@id":"https:\/\/cybersecuritynews.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/Hackingtutorialsandnews","https:\/\/x.com\/The_Cyber_News","https:\/\/www.linkedin.com\/company\/cybersecurity-news\/"]},{"@type":"Person","@id":"https:\/\/cybersecuritynews.com\/#\/schema\/person\/7eb7d8d026aa5dd566f134d4def5c05c","name":"Tushar Subhra Dutta","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cybersecuritynews.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/f8bc0247220c7d4dea6c8b5a77d910613305ead17b13c2a7920b400435a848dd?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f8bc0247220c7d4dea6c8b5a77d910613305ead17b13c2a7920b400435a848dd?s=96&d=mm&r=g","caption":"Tushar Subhra Dutta"},"description":"Tushar is a senior cybersecurity and breach reporter. He specializes in covering cybersecurity news, trends, and emerging threats, data breaches, and malware attacks. With years of experience, he brings clarity and depth to complex security topics.","url":"https:\/\/cybersecuritynews.com\/author\/tushar\/"}]}},"jetpack_featured_media_url":"https:\/\/i3.wp.com\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEi8Tr2duTAZG5gCbPNo1lnHNaw4xoaZuh_FfUMaAgS0x2z45gjslc_ywJvMng_4s7lLGKOq34Raxnb-97kNx4_ek-patZYYlKDzjZH-a-1kSZOkOsuWtTMX9U3JSy6sMS5wgk3gbVPQWX1oxh6RtVGM_1rtobUdeND7luIaoEM6QNMYOpdk037S7EI44FI\/s16000\/Sturnus%20Banking%20Malware%20Steals%20Communications%20from%20Signal%20and%20WhatsApp,%20Gaining%20Full%20Control%20of%20The%20Device.webp?w=1600&resize=1600,900&ssl=1","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/posts\/133909","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/comments?post=133909"}],"version-history":[{"count":1,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/posts\/133909\/revisions"}],"predecessor-version":[{"id":133934,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/posts\/133909\/revisions\/133934"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/media\/133935"}],"wp:attachment":[{"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/media?parent=133909"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/categories?post=133909"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cybersecuritynews.com\/wp-json\/wp\/v2\/tags?post=133909"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}