02/27/2026
If your team uses WhatsApp for work conversations, this one should make you stop and think đ
Security researchers have discovered an Android malware called Sturnus.
It does something most people assume is impossible.
It can read WhatsApp, Signal, and Telegram messages, in real time, even though theyâre end-to-end encrypted.
And no, it doesnât âbreakâ the encryption.
It waits until the message appears on the screen and captures it.
Like someone standing behind you, reading over your shoulder, but digitally.
Sturnus is a powerful banking trojan that gives attackers full control of an infected Android device.
Once installed (usually through fake apps posing as Chrome or system updates), it can:
Read everything on the screen
Capture messages, contact names, typed text and conversations
Steal bank details using fake overlay screens
Monitor app activity
Take remote control through a live session
Tap buttons, approve MFA prompts, transfer money
Hide malicious actions behind fake âsystem updateâ screens
Block you from uninstalling it
Sturnus is still being tested, but its architecture is âready to scaleâ, meaning it could quickly turn into a widespread campaign.
And hereâs the part that really matters for businesses:
đ End-to-end encryption doesnât protect you from malware sitting on the device
đ Consumer messaging apps were never designed for sensitive business communication
đ If a phone is compromised, so is every app on it, including WhatsApp
This is why my team and I constantly advise businesses not to rely on WhatsApp, Telegram, or Signal for customer information, financial discussions, internal planning, or anything confidential.
Tools like Microsoft Teams or your business email offer proper access controls, admin oversight, compliance options, and secure device management.
WhatsApp doesnât.
If your team is still mixing personal apps with business communication, malware like Sturnus turns that from a convenience into a serious risk.
đ¤ Do you think your staff still use WhatsApp for business chat? Even if youâve told them not to?