Spyware Program DragonDoll Targets Android Users in Russia and 26 Other Countries

© ООО «Региональные новости»

Android smartphone users in over 26 countries, including Russia, have become targets of a new cyberattack using the spyware program DragonDoll, RBC reports. The malicious software is being distributed disguised as a Google Chrome browser update and enables attackers to gain access to sensitive information on devices.

Experts from the Threat Intelligence department first detected DragonDoll in the spring of 2026 while investigating an attack on users in Saudi Arabia. Over the following two months, they identified approximately 150 samples of the malicious program.

Researchers note that once installed, the program can give attackers almost complete control over the infected device. Potential threats include theft of personal data, access to messenger conversations, and collection of other sensitive information.

Experts warn that the main danger of DragonDoll lies in its distribution method: the malicious app masquerades as a routine update of a popular browser, leading users to install it themselves without realizing the risk.

Specialists recommend installing updates only through official app stores and verifying the source of programs before downloading, especially if the update is offered through third-party websites or suspicious notifications.