Netskope Threat Labs

SpyNote

ATP Sandbox Adv. Heuristics

SpyNote is an Android trojan that abuses Accessibility services and other permissions to collect SMS messages and contact lists, record audio and the screen, log keystrokes, bypass two factor authentication, and track GPS locations.

First seen
March 2022
Last seen
October 2026
Spynote
Alert Name
Android.Backdoor.Spynote
Android.Spyware.Spynote
Android.Spyware.SpyNote
Android.Trojan.SpyNote
ByteCode-MSIL.Trojan.SpyNote