# Sturnus Android Malware Directly Captures Screen, Bypassing E2EE

**URL:** https://discuss.privacyguides.net/t/sturnus-android-malware-directly-captures-screen-bypassing-e2ee/33149
**Category:** News
**Created:** 2025-11-22T20:14:50Z
**Posts:** 2

## Post 1 by @fria — 2025-11-22T20:14:50Z

A new strain of insidious Android malware has been [discovered](https://www.threatfabric.com/blogs/sturnus-banking-trojan-bypassing-whatsapp-telegram-and-signal#conclusions) that can “bypass encrypted messaging” by capturing content directly from the screen after decryption.

* * *
This is a companion discussion topic for the original entry at [https://www.privacyguides.org/news/2025/11/20/sturnus-android-malware-can-bypass-encrypted-messaging-capable-of-full-device-takeover](https://www.privacyguides.org/news/2025/11/20/sturnus-android-malware-can-bypass-encrypted-messaging-capable-of-full-device-takeover)

---

## Post 2 by @kissu — 2025-11-23T20:00:51Z

And this is why I still consider that using GOS with:

- regular “safe apps” on the main account
- having a 2nd profile for bank/important apps
- having a 3rd profile for all the trash apps like Gyms apps etc

is still the way to go. :sweat_smile:  
Nothing beats clean sharp separation with no cross contamination.

PS: I do assume that I’m right on thinking that this malware cannot reach out from a profile to another. Otherwise forget what I wrote. :see_no_evil_monkey:

---

## Post 3 by @fria — 2025-11-23T20:00:52Z