Spyware
BoneSpy
According to Lookout, BoneSpy is based on the Russian-developed, open-source DroidWatcher surveillanceware, featuring nearly identical code, names, and log messages in multiple classes related to the
BoneSpy is a Android spyware operated by Gamaredon Group.
Background
Lookout reports that BoneSpy derives from the Russian-built, open-source DroidWatcher surveillanceware, sharing nearly identical code, names, and log messages across several classes that handle databases of harvested exfil data, including call logs, location tracking, SMS messages, notifications, and browser bookmarks. The class names for many of its entry points (receivers, activities, and services) were identical or closely resembled those in DroidWatcher samples.
Source: Malpedia (Fraunhofer FKIE).