The company’s latest security update contains the second-highest number of defects patched so far this year.

The agency’s brief notice also directed messaging app users to advice on how to protect themselves.

The spyware poses as popular apps like TikTok, and may break free of Russian borders at some point, the researchers say.

The campaign involves apps posing as Signal and the defunct ToTok, according to ESET.

The critical, actively exploited zero-day vulnerabilities affect the Linux kernel and Android runtime.

Android partners and customers have experienced a temporary respite from double-digit vulnerabilities this summer. Google issued no security patches in its update last month.

Both companies have faced controversy in recent years, primarily for their work in circumventing mobile device security features

The most serious flaw in the monthly security update affects the Android system and could be exploited to achieve local escalation of privilege, the company said.

The company plans to add its Advanced Protection program on devices, as will use AI to detect and stop scams.

The monthly Android security update covers 47 vulnerabilities, including a high-severity defect in the widely used FreeType software library.