Android spyware pretends to be signal or totok update to fool victims – here is how to remain safe

• Prospy and Tospy -Malware -Campaigns Faked Signal and Totok to Infect Android -Users
• Malware Exfiltrates SMS, contacts, files and disguises themselves as Google Play Services
• Apps spread through third -party stores; Users called for to stick to official app sources

Android users in the United Arab Emirates and the wider region are targeted by two malicious campaigns that falsified known chat apps, signal and totok, to distribute malware.

Security researchers at Eset said they started tracking the Prospy and Tospy campaigns in June 2025, but believe they could have started back in 2024.