SpyNote Android malware spreads via fake volcano eruption alerts

The Android ‘SpyNote’ malware, camouflaged as a fake ‘IT-alert’ public alert service by the Italian Department of Civil Protection, is being used in attacks in Italy. The malware, which is delivered through a malicious APK file, can record from the device’s camera, track location, log keystrokes, capture screenshots, record calls, and target Google and Facebook accounts. A Google spokesperson confirmed that apps containing this spyware are not found on Google Play.