Credit: Mishaal Rahman / Android Authority
- LunaSpy Android spyware hides as an antivirus or banking protection app, spreading via messaging apps like Telegram.
- It fakes virus scans to trick you into granting permissions, then steals data, tracks you, and can even record audio or video.
- Avoid downloading APKs from messenger links and be wary of unknown security apps requesting broad permissions.
Think you’re beefing up your Android phone’s security? If the antivirus app you just installed came from a random Telegram or a suspiciously out-of-context message from a friend, you might’ve just invited a spy into your pocket.
A daily Kaspersky blog post says a new piece of Android spyware called LunaSpy has been making the rounds since at least February 2025, slipping onto phones through messaging apps. Sometimes it’s pitched as an antivirus, and other times it’s so-called banking protection.