SpyNote
Also known as: CypherRat
According to Cleafy, SpyNote abuses Accessibility services and other Android permissions in order to: Collect SMS messages and contacts list; Record audio and screen; Perform keylogging activities; Bypass 2FA; Track GPS locations.
Linked Threat Actors
C2 Infrastructure
Last 7 days
| Date | C2 Hosts |
|---|---|
| Apr 14, 2026 | 1 |
| Apr 13, 2026 | 3 |
| Apr 12, 2026 | 2 |
| Apr 11, 2026 | 2 |
| Apr 8, 2026 | 1 |
Further Reading
Key findings This report presents: The Russian autonomous system PROSPERO (AS200593) could be linked […]
SpyNote, also known as SpyMax and CypherRat, is a unique and effective Spyware which developed unique interest in banking users
SpyNote, also known as SpyMax and CypherRat, is a unique and effective Spyware which developed unique interest in banking users
Beginning in May 2019, Volexity started tracking a new series of strategic web compromises that have been used in highly targeted attacks against Tibetan individuals and organizations by a Chinese […]