Fantasy Hub is spyware for rent—complete with fake app kits and support

Fantasy Hub is described as spyware for rent, sold as Malware-as-a-Service on Russian-language cybercrime forums, with a full subscription model and accompanying documentation and video tutorials that simplify its use for less experienced attackers. According to Zimperium, researchers identified Fantasy Hub as a new Android spyware and remote access Trojan that can be distributed via counterfeit Google Play pages imitating apps such as Telegram or online banking portals.

The framework even offers a “dropper” option to upload any Android APK and return a modified version with Fantasy Hub added, effectively easing integration for buyers. Once installed, it can steal SMS messages, call logs, contacts, photos, and videos, intercept and delete notifications, and initiate live audio and video streams using the device’s camera and microphone without user consent.

The article notes that these counterfeit apps often request only SMS access, but this single permission unlocks broad control, enabling attackers to tailor phishing windows for banking apps and harvest credentials. Malwarebytes recommends staying to trusted sources and using its Android protection to detect this malware.