Android.Spy is a big group of trojan programs with spyware functionality. It includes both representatives of large families and individual malicious apps. Depending on the version, modification, and family, these malicious programs can perform different actions. For example, they can:
intercept the contents of SMS and various notifications;
monitor chats in messenger apps;
obtain information about phone calls;
track a device’s location;
access the phonebook;
collect information about the browser bookmarks and history;
collect technical data about infected devices;
hijack or substitute clipboard data;
search for the files stored on infected devices and transfer them to the attackers;
create screenshots;
take photos;
record the surroundings;
download their own updates or additional modules.
Malicious actors can embed such trojans into the copies of initially harmless apps or distribute them under the guise of certain programs.
