SpyNote RAT

Description

SpyNote RAT (Remote Access Trojan) is a family of malicious Android apps. The SpyNote RAT builder tool can be used to develop malicious apps with the malware’s functionality.

Names

Name
SpyNote RAT
SpyNote
CypherRat

Category

Malware

Type

• Backdoor
• Info stealer
• Exfiltration

Information

• https://threatpost.com/new-trojan-spynote-installs-backdoor-on-android-devices/119560/
• https://www.zscaler.com/blogs/research/spynote-rat-posing-netflix-app
• https://www.cleafy.com/cleafy-labs/spynote-continues-to-attack-financial-institutions
• https://blog.f-secure.com/take-a-note-of-spynote/
• https://www.bleepingcomputer.com/news/security/spynote-android-malware-spreads-via-fake-volcano-eruption-alerts/
• https://www.fortinet.com/blog/threat-research/android-spynote-moves-to-crypto-currencies
• https://www.cyfirma.com/research/spynote-unmasking-a-sophisticated-android-malware/

Mitre Attack

• https://attack.mitre.org/software/S0305/

Malpedia

• https://malpedia.caad.fkie.fraunhofer.de/details/apk.spynote

Alienvault Otx

• https://otx.alienvault.com/browse/pulses?q=tag:spynote

Other Information

Uuid

f6df192b-ad71-4097-b372-0edf8a586d50

Last Card Change

2024-12-26