CIA developed an Android malware that works as a text proxy

WikiLeaks published the manual of another CIA hacking tool part of the Vault 7 leak series. This tool is referred to at the CIA as HighRise. It is an Android application for intercepting and redirecting text messages to a remote web server. It is also known as TideCheck

CIA operatives must install the app on the target's device and then manually run it at least one time. When starting the tool for the first time, CIA operatives must enter a special code to access its settings. The default code is "inshallah," which is the Arabic word for "God willing."

According to the manual, the tool's main features are as follows:

Send a copy of all incoming text messages to an Internet-based server controlled by CIA operatives.

Send text messages from the target's smartphone.

Provide a communications channel between the HighRise field operator and the victim’s device.