UCREATOR ANDROID SPYWARE CAN STEAL TELEGRAM 2FA PASSWORDS AND CLONE WECHAT ACCOUNTS

Summary from the TLDR InfoSec newsletter

The uCreator Android spyware kit hides inside sideloaded Telegram and Telegram X builds or runs WeChat in its own container. It can read chats, capture Telegram 2FA passwords before hashing, reset sessions, change phone numbers, and hide attacker devices. Its WeChat module extracts login credentials and clones accounts. A leaked backend shows a rentable service with customer IDs, phone farms, bulk-contact operations, and scheduled activity designed to evade platform risk checks.