PhoneSpy records video and audio and steals contacts, images, messages, and more.

More than 1,000 Android users have been infected with newly discovered malware that surreptitiously records audio and video in real time, downloads files, and performs a variety of other creepy surveillance activities.

In all, researchers uncovered 23 apps that covertly installed spyware that researchers from security firm Zimperium are calling PhoneSpy. The malware offers a full-featured array of capabilities that, besides eavesdropping and document theft, also includes transmitting GPS location data, modifying Wi-Fi connections, and performing overlay attacks for harvesting passwords to Facebook, Instagram, Google, and the Kakao Talk messaging application.

“These malicious Android apps are designed to run silently in the background, constantly spying on their victims without raising any suspicion,” Zimperium researcher Aazim Yaswant wrote. “We believe the malicious actors responsible for PhoneSpy have gathered significant amounts of personal and corporate information on their victims, including private communications and photos.”

So far, all known victims are located in South Korea, but Zimperium hasn’t ruled out the possibility that people in other countries are also being targeted. The researchers have yet to discover if there’s any connection between those infected. Since PhoneSpy has the ability to download contact lists, it’s possible that victims know each other or are otherwise connected through work or other affiliations.