When you purchase through links on our site, we may earn an affiliate commission.Heres how it works.
Its also impossible to determine exactly how many people were compromised.
But the analysts did dissect the banking trojan.
SpyNote, as they found, comes with numerous information-stealing capabilities.
Factory reset
When the user installs the app, it essentially disappears from the endpoint.
The attackers did this on purpose, to make it harder for the victims to uninstall the app.
It activates and starts stealing information after receiving the green light from the attackers.
That can be either via an SMS message, or similar.
The SpyNote malware app can be launched via an external trigger, the researchers explained.
Upon receiving the intent, the malware app launches the main activity.
ViaThe Hacker News