ALERT: Be Cautious of This ‘High-Tech’ Spyware – It Can Access Your Funds and Monitor Your Conversations

A new malware called SpyNote that knows how to hide itself is making the rounds on the Internet. According to Internet security company F-Secure, this fake app can steal sensitive user data, such as bank details, and primarily targets Android phones.

Per Amit Tambe, a researcher at the company, this spyware, SpyNote, spreads through “smishing,” which involves sending infected text messages. When users receive these messages, they are prompted to download specific apps via the attached link, bypassing Google Play’s security measures.

How it hides itself on Android

Once an app (spyware) is installed on an Android device, it camouflages itself and hides itself to avoid detection. In addition, according to F-Secure, SpyNote takes an “extra step” to hide its activities from view on recent screens of the Android operating system. It also remains hidden until an “external trigger” is sent to the victim’s device to activate the malware.

How SpyNote steals user data

Of course, this spyware also violates users’ privacy because it can record phone calls. The recorded files are saved in .wav file format and then sent to the attacker. When the victim “receives an incoming call, the phone’s state changes and the transceiver is triggered. The code in the transceiver checks if the victim has answered the call and, once confirmed, starts recording audio,” notes F-Secure.

In addition, the malware can steal more information, and it can capture .jpeg files from the user’s phone and act as a keylogger and potentially steal user information such as bank passwords and more.

According to the company, the infection rates of this Trojan have increased since its source code was released in October 2022. Therefore, it is best to stay vigilant about this malware and also avoid clicking on foreign links received via SMS and more.