DIRECTORY

  • Alerts
  • APTs
  • Blog
  • Books
  • Certifications
  • Cheat Sheets
  • Courses
  • Cyber Briefing
  • CyberDecoded
  • CyberReview
  • CyberStory
  • CyberTips
  • Definitions
  • Domains
  • Entertainment
  • FAQ
  • Frameworks
  • Hardware Tools
  • Incidents
  • Malware
  • News
  • Papers
  • Podcasts
  • Quotes
  • Reports
  • Tools
  • Threats
  • Tutorials
No Result
View All Result
  • Login
  • Register
  • Cyber Citizens
  • Cyber Professionals
  • Institutions
CyberMaterial
Talk To An Expert
  • Cyber Citizens
  • Cyber Professionals
  • Institutions
CyberMaterial
No Result
View All Result
Talk To An Expert
CyberMaterial
Home Alerts

SpyNote Malware Targets Android

July 25, 2023
Reading Time: 2 mins read
in Alerts

A new smishing campaign is targeting Japanese Android users with an updated version of the SpyNote malware, according to researchers at McAfee.

In June, attackers impersonated a power and water infrastructure company, sending SMS alerts about payment issues to lure victims onto a rogue website where they were infected with the remote-controlled SpyNote malware. This spyware exploits accessibility services and device administrator privileges, enabling it to steal sensitive user information, including device location, contacts, SMS messages, and phone calls.

The malware disguises itself as the Tokyo Waterworks Bureau and TEPCO Power Transmission to deceive users. SpyNote is commonly distributed through smishing attacks and phishing websites, using legitimate app icons to appear authentic.

In the past, a previous version of SpyNote targeted financial institutions, including the Bank of Japan in April 2023. The spyware’s capabilities allow hackers to track user activities, steal personal and financial data, and remotely control devices. Discovered in 2016, the malware has evolved over the years and remains a significant threat to Android users.

During the last quarter of 2022, ThreatFabric noticed a substantial increase in samples from the SpyNote malware family, indicating its growing prevalence. Additionally, ThreatFabric researchers detected a new variant called SpyNote.C, which specifically targets banking apps, social networking apps, and legitimate services such as the U.S. Postal Service and financial institution HSBC. The research from Capterra highlighted that bogus package delivery scams were the second most common type of SMS phishing scam in 2022, ranking just behind banking schemes.

This alarming trend emphasizes the importance of heightened vigilance and robust cybersecurity measures to protect Japanese Android users from these malicious attacks.

Source:
  • Android SpyNote attacks electric and water public utility users in Japan
Tags: AlertsAlerts 2023CyberattackCybersecurityJuly 2023PhishingSmishing
27
VIEWS
ADVERTISEMENT

Related Posts

Arm Warns of Mali GPU Vulnerabilities

Arm Warns of Mali GPU Vulnerabilities

October 3, 2023
CISA Addresses Active Exploitation

CISA Addresses Active Exploitation

October 3, 2023
FBI Warns of Surge in Phantom Hacker Scams

FBI Warns of Surge in Phantom Hacker Scams

October 3, 2023
TeamCity Vulnerability Exploited After Patch

TeamCity Vulnerability Exploited After Patch

October 3, 2023

More Articles

Incidents

APT IRAN Claims 4TB Data Access

September 28, 2023
Incidents

Ransomware Group LostTrust’s Rapid Attacks

September 28, 2023
Incidents

IT Services Provider Hit by Donut Gang

September 22, 2023
Incidents

Baruch College Malware Incident Update

September 29, 2023

Security through data

Cybersecurity Domains

  • API Security
  • Business Continuity
  • Career Development
  • Compliance
  • Cryptography
  • HSM
  • KPIs / KRIs
  • Penetration Testing
  • Shift Left
  • Vulnerability Scan

Emerging Technologies

  • 5G
  • Artificial Intelligence
  • Blockchain
  • Cryptocurrency
  • Deepfake
  • E-Commerce
  • Healthcare
  • IoT
  • Quantum Computing

Frameworks

  • CIS Controls
  • CCPA
  • GDPR
  • NIST
  • 23 NYCRR 500
  • HIPAA

Repository

  • Books
  • Certifications
  • Definitions
  • Documents
  • Entertainment
  • Quotes
  • Reports

Threats

  • APTs
  • DDoS
  • Insider Threat
  • Malware
  • Phishing
  • Ransomware
  • Social Engineering

© 2023 | CyberMaterial | All rights reserved.

World’s #1 Cybersecurity Repository

  • About
  • Legal and Privacy Policy
  • Site Map
No Result
View All Result
  • Alerts
  • Incidents
  • News
  • Audience
    • Cyber Citizens
    • Cyber Professionals
    • Institutions
  • Highlights
    • Blog
    • CyberDecoded
    • Cyber Review
    • CyberStory
    • CyberTips
  • Cyber Risks
    • Alerts
    • Attackers
    • Domains
    • Incidents
    • Threats
  • Opportunities
    • Events
    • Jobs
  • Repository
    • Books
    • Certifications
    • Cheat Sheets
    • Courses
    • Definitions
    • Frameworks
    • Games
    • Hardware Tools
    • Memes
    • Movies
    • Papers
    • Podcasts
    • Quotes
    • Reports
    • Tutorials
  • Report Cyber Incident
  • GET HELP
  • Contact Us

Subscribe to our newsletter

© 2022 Cybermaterial - Security Through Data .

Welcome Back!

Sign In with Google
Sign In with Linked In
OR

Forgotten Password? Sign Up

Create New Account!

Sign Up with Google
Sign Up with Linked In
OR

All fields are required. Log In

Retrieve your password

Please enter your username or email address to reset your password.

Log In

Add New Playlist

This website uses cookies. By continuing to use this website you are giving consent to cookies being used. Visit our Privacy and Cookie Policy.