Android SpyNote attacks electric and water public utility users in Japan

McAfee Mobile observed a June 7, 2023 smishing campaign targeting Japanese Android users by impersonating power and water utilities to trick victims into downloading SpyNote RAT from a phishing site; the malware abuses Accessibility and device-admin privileges to persist and steal location, contacts, SMS/calls, and two-factor authentication tokens. The report includes multiple SHA256 hashes, package names, screenshots of the phishing flow and fake settings screens, and notes McAfee detection as Android/SpyNote.