uCreator Android spyware can steal Telegram 2FA passwords and clone WeChat accounts

The rentable Android spyware kit uCreator can take over Telegram and WeChat accounts when a user installs a tampered copy distributed outside official app stores or runs WeChat inside the kit makers’ container application. The source links the Telegram component to the Baohuo backdoor, but does not confirm who operated the campaign.