Researchers at Lookout discovered a new mobile spyware dubbed Monokle that was developed by a Russian defense contractor. The surveillance software abuses Android accessibility services to capture data from third party apps, including Google Docs, Facebook messenger, VK, Whatsapp, WeChat, Viber, Skype, and Snapchat. The spyware is distributed through fake apps, some of which are related to specific interests or regions, this suggests that the malware was currently used in limited areas around the world. Researchers also noticed that the spyware was digitally signed with the same digital security suite called Defender.”]
Source: https://securityaffairs.co/wordpress/88888/malware/monokle-surveillance-malware.html