Operators of the SpyNote Android banking trojan have updated the payload to impersonate legitimate cryptocurrency wallets and facilitate cryptocurrency exfiltration, which represents a significant shift from the malware's prior focus on account credentials, according to Hackread.
Article Link: Cryptowallets spoofed by SpyNote Android trojan | SC Media