RatMilad, a new virus that allows attackers to listen to victims’ phone conversations and download photos, has appeared on Android. This was known from a new report by information security experts from the Zimperium company.

It is noted that the device is distributed under the guise of legitimate programs for creating virtual phone numbers, which are widely used when registering a large number of accounts on social networks and other online services. When launched, the rogue utilities ask for a large number of permissions, which according to experts should immediately warn users.

The malware requests access to your contact list, SMS content, microphone, clipboard data, GPS and more. After receiving them, the program starts collecting information about the victim’s movements, recording conversations, scanning media files and sending the results to the attackers’ servers. The latter uses the information to blackmail users of infected devices and hack accounts on various services.

Zimperium does not know how many devices RatMilad managed to infect, but they do know that infected programs are spreading even on Telegram. One of the posts with a link to download the virus garnered more than 4,000 views and nearly 200 reposts. The company is also known to prevent at least one corporate network breach using RatMilad.