SpyNote (computer virus)

Chronicle

2024: Bank of Russia Governor Elvira Nabiullina warns of "Ripper Virus" for Android

According to the Central Bank of Russia, in 2024, about half of all cases of unauthorized debits of funds through mobile banking applications on Android were related to the SpyNote malware. This was announced on February 19, 2025 by the Chairman of the Bank of Russia Elvira Nabiullina, calling on financial organizations to strengthen the protection of customers from cyber threats.

According to Izvestia, the SpyNote virus began to actively spread in Russia in the second half of 2024. This is malware with remote access that is hidden in fake mobile applications. It allows scammers to read passwords, intercept SMS codes and manage victims' bank accounts. In this regard, the Central Bank demanded that banks take additional security measures, setting a deadline for the implementation of these measures until March 2025.

𝓲

Фото: Freepik

SpyNote infects users' devices through smashing tactics, a cyber fraud method in which an SMS with a malicious link is sent to the victim. According to experts, even after removing the infected application, SpyNote can remain active on the device until the user performs a full reset to factory settings.

Attackers use several tactics to infect smartphones malware. ON One of the common schemes is phishing links in SMS, which are disguised as notifications about the need to update the security system or confirm a financial transaction. Another method is the distribution of fake applications through third-party sites and, messengers where viruses are hidden under the guise of antivirus programs or online banking services. Fraudsters use social engineering, calling potential victims on behalf of banks or technical support and convincing them to install supposedly protective. software

Experts advise owners of Android smartphones to download applications only from official stores, avoid clicking on unknown links and use reliable antivirus solutions to protect personal data.^[1]

Notes