A new Android spyware campaign called LunaSpy has emerged, disguising itself as an antivirus or banking protection application. It spreads through deceptive messenger links and fraudulent channels, tricking users into downloading it. Once installed, LunaSpy mimics a legitimate scanner and fabricates threat detections while secretly monitoring device activities and stealing sensitive data. Since February 2025, it has been spreading through hijacked contact accounts and new Telegram channels. Users are advised to avoid downloading apps from unofficial links, scrutinize messenger invitations, and only install applications from reputable app stores. Employing reliable antivirus software and being cautious with permissions can enhance device security.