Italian Spyware Hides in Android Updates to Steal WhatsApp Messages

An Italian surveillance firm deployed malware disguised as system updates. Once installed, it exploited accessibility features meant to help disabled users—tricking Android into letting the malware read screens and control apps without permission. The goal: access WhatsApp messages. By compromising devices directly, attackers bypass encryption meant to protect messages in transit.