SOVA malware is back and is evolving rapidly

[[correlate]]

Content source

https://www.cleafy.com/cleafy-labs/sova-malware-is-back-and-is-evolving-rapidly

In September 2021, SOVA, a new Android Banking Trojan, was announced in a known underground forum. Even though at that time the author claimed the malware was still under development, it actually already had multiple capabilities and was basically almost in the go-to market phase.

Furthermore, the authors of SOVA showed a roadmap with the future update of the malware as shown in Figure 1.

SOVA malware is back and is evolving rapidly | Cleafy Labs

SOVA, a new Android Banking Trojan, is spreading across Europe. Already appeared in different versions, this malware is now evolving, and it is targeting more than 200 mobile applications, ranging from banking apps to crypto exchanges/wallets. Here's the technical analysis.

www.cleafy.com