Italian digital rights organization Osservatorio Nessuno has exposed a new Android spyware called Morpheus, linked to IPS, a 30-year-old Italian lawful interception company. The spyware was distributed via fake phone update apps, with help from the target's telecom provider who blocked mobile data and sent an SMS prompting installation. Once installed, it abused Android accessibility features and spoofed WhatsApp to gain full account access via biometric confirmation. The attack is believed to be politically motivated. IPS joins a growing list of Italian spyware makers including NSO Group-style operators, though Morpheus is considered 'low cost' as it relies on social engineering rather than zero-click exploits.
Sort: