A new spyware campaign targeting Android users, identified as LunaSpy, has been reported by cybersecurity firm Kaspersky and is believed to have been operational since at least February 2025. This malware disguises itself as antivirus software delivered through messenger applications. It can record audio and video, access texts, call logs, and contacts, execute shell commands, steal passwords, track locations, and record the device screen. LunaSpy spreads primarily through messenger platforms like Telegram, where users receive messages urging them to install the app. Users are advised to download applications only from official sources like the Google Play Store and to be cautious with third-party sources. They should also block installations from unknown sources, review app permissions, and uninstall any suspicious applications immediately. A factory reset can remove malware if necessary, provided important data is backed up.