

Secondly, researchers warn against downloading apps outside of the Google Play Store, which is already a Wild, Wild West in and of itself. If you have BingeChat or Chatico on your phone, the first order of business is to, of course, remove them from your phone immediately. This is on top of the fact that GravityRAT, known to be used since 2015, can snatch device information (e.g., IMEI, IP address, phone number, device location, etc.), contact lists, email addresses, and call and text logs.

Plus, the malicious actors can remotely delete the files, too. The updated GravityRAT malware discovered in both chat apps can steal users' WhatsApp backups. Chatico is underpinned by the same malicious code as the BingeChat app and was distributed via a website, too, that was communicated with a command-and-control server.
