SOFTWARE
SOFTWARE
A-B
C-D
E-F
G-H
I-J
K-L
M-N
O-P
Q-R
S-T
U-V
W-X
SpyNote RAT
SpyNote RAT (Remote Access Trojan) is a family of malicious Android apps. The SpyNote RAT builder tool can be used to develop malicious apps with the malware's functionality. [1]
ID: S0305
Type: MALWARE
Platforms: Android
Version: 1.2
Created: 25 October 2017
Last Modified: 10 October 2019
Techniques Used
| Domain | ID | Name | Use |
|---|---|---|---|
| Mobile | T1432 | Access Contact List |
SpyNote RAT can view contacts.[1] |
| Mobile | T1402 | App Auto-Start at Device Boot |
SpyNote RAT uses an Android broadcast receiver to automatically start when the device boots.[1] |
| Mobile | T1429 | Capture Audio |
SpyNote RAT can activate the victim's microphone.[1] |
| Mobile | T1412 | Capture SMS Messages |
SpyNote RAT can read SMS messages.[1] |
| Mobile | T1533 | Data from Local System |
SpyNote RAT can copy files from the device to the C2 server.[1] |
| Mobile | T1430 | Location Tracking |
SpyNote RAT collects the device's location.[1] |