SpyNote Android malware spreads via fake volcano eruption alerts

Researchers have uncovered a malware attack, called SpyNote, targeting Android users in Italy through a fake ‘IT-alert’ service warning of a supposed volcano eruption. The Android package file installs SpyNote, enabling hackers to perform a range of illegal actions, including stealing credentials, recording camera, tracking GPS and network location, keylogging, and capturing screenshots. The malware was first documented in 2022, but detection rates have spiked due to a source code leak in 2023.