Remotely activating the microphone to listen to live conversations and the camera to capture photos or live video.

SpyNote: Unmasking a Sophisticated Android Malware - cyfirma

The malware has undergone several significant updates and has been linked to various cybercriminal campaigns:

SpyNote is a highly intrusive that targets Android devices to perform unauthorized surveillance and data exfiltration. First surfacing in 2016, it has evolved into a sophisticated tool used by cybercriminals to gain near-total control over infected mobile devices. Core Capabilities

SpyNote operates by requesting extensive and intrusive permissions during installation, often masquerading as legitimate apps like Netflix, Avast, or system updates. Key features include:

Abusing Android’s Accessibility Services to log keystrokes, which allows attackers to steal credentials and bypass two-factor authentication (2FA) codes.