Millions of Android users warned over a specific app that can access your messages: ‘Delete it now’

Tech experts are raising an alarm over an India-based hacking group 'Bahamut' that is thought to be behind complex communications-stealing malware that has infiltrated the Google Play Store.

It could steal your private messages from WhatsApp, Telegram and Facebook.

Users are urged to check their devices and see if they have dangerous SafeChat app.

Delete it immediately if you have previously downloaded it.

Here’s all your need to know to stay safe.

Meanwhile, Ofcom has issued a warning over the roaming costs to holidaymakers who travel outside of the UK.

Also, here are some tips to prevent bacterial build-up on your device.

Have you downloaded SafeChat? Delete it immediately

According to cyber firm Cyfirma, Android users should check their devices and delete a specific app - SafeChat - if they have it right now.

It has been identified as a complex communications-stealing malware that uses similar operational mechanisms to previous bugs but can gain more permissions.

Ever since it infiltrated the Google Play Store, the tech giant removed and banned it but it can remain on devices that it has previously been downloaded to, actively stealing your data without you realising.

Cyfirma believes that Indian-based hacking group 'Bahamut' is behind SafeChat.

It is thought to have been set up in 2017 and to be government-related.

Read more:

⋙ WhatsApp: This is how to save important messages

⋙ DWP issues warning over text messages for £750 cost of living payment: 'This might be a scam'

What is ‘Bahamut’ and why is it dangerous?

It is reported that eight different versions of Bahamut spyware have been identified - with the group thought to be linked to a specific state government.

The Cyfirma report said:

If the Bahamut spyware is enabled, then it can be remotely controlled by Bahamut operators and can exfiltrate various sensitive device data, such as contacts, SMS messages, call logs, a list of installed apps, device locations, and device accounts.

The malware can access information relating to internet connection, IP address or SIM serial number.

In 2022, 'Bahamut' was linked to dummy VPN apps designed to steal sensitive data while spying on a person's messages on multiple apps, also including Signal and Viber.

In case with SafeChat, it reportedly makes use of spyware and can see texts, call logs and GPS locations.

Read more:

⋙ Google issues warning over 'infected' Android apps with millions of downloads: Delete them now

⋙ iPhone users are warned over their passcode, here's how it can make you lose all your money

Sources used:

- Mirror: 'Android users warned to delete app right now as it steals your private messages'