Gravityrat

BleepingComputer reports that WhatsApp backup files are being exfiltrated by the updated Android GravityRAT spyware distributed in a malware campaign that has been ongoing since last August.

Overall, the analysis turned up more than 10 new versions of GravityRAT, all distributed within trojanized applications – including those masquerading as secure file-sharing applications or media players.