1. Home
  2. Software
  3. SpyNote RAT

SpyNote RAT

SpyNote RAT (Remote Access Trojan) is a family of malicious Android apps. The SpyNote RAT builder tool can be used to develop malicious apps with the malware's functionality. [1]

ID: S0305
ⓘ
Type: MALWARE
ⓘ
Platforms: Android
Version: 1.2
Created: 25 October 2017
Last Modified: 10 October 2019
Mobile Layer
download view

Techniques Used

Domain ID Name Use
Mobile T1432 Access Contact List

SpyNote RAT can view contacts.[1]
Mobile T1402 Broadcast Receivers

SpyNote RAT uses an Android broadcast receiver to automatically start when the device boots.[1]
Mobile T1429 Capture Audio

SpyNote RAT can activate the victim's microphone.[1]
Mobile T1412 Capture SMS Messages

SpyNote RAT can read SMS messages.[1]
Mobile T1533 Data from Local System

SpyNote RAT can copy files from the device to the C2 server.[1]
Mobile T1430 Location Tracking

SpyNote RAT collects the device's location.[1]

References

  1. Shivang Desai. (2017, January 23). SpyNote RAT posing as Netflix app. Retrieved January 26, 2017.