SecurityThe Hacker Newsabout 3 hours ago
uCreator Spyware Steals Telegram 2FA Passwords
7 min read
Researcher Ovi discovered uCreator, a rentable Android spyware kit, which steals Telegram two-factor authentication passwords and clones WeChat accounts. The kit hides code inside tampered app copies spread via sideloading or a container app called 洋葱盒子. Analysis published October 21, 2026, matches a 2025 Doctor Web report on Baohuo, infecting over 58,000 devices.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyGoogle
