{"id":171750,"date":"2023-07-21T00:00:03","date_gmt":"2023-07-21T07:00:03","guid":{"rendered":"https:\/\/www.mcafee.com\/blogs\/?p=171750"},"modified":"2024-11-21T07:48:40","modified_gmt":"2024-11-21T15:48:40","slug":"android-spynote-attacks-electric-and-water-public-utility-users-in-japan","status":"publish","type":"post","link":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/android-spynote-attacks-electric-and-water-public-utility-users-in-japan\/","title":{"rendered":"Android SpyNote attacks electric and water public utility users in Japan"},"content":{"rendered":"

Authored by <\/span>Yukihiro Okutomi<\/span><\/b>\u00a0<\/span><\/p>\n

McAfee’s Mobile team observed a smishing campaign against Japanese Android users posing as a power and water infrastructure company in early June 2023. This campaign ran for a short <\/span>time <\/span>from June 7. The SMS message alerts about payment problems to lure victims to a phishing website to infect the target devices with a remote-controlled SpyNote malware. In the past, cybercriminals have often targeted financial institutions. However, on this occasion, public utilities were the target to generate a sense of urgency and push victims to act immediately.<\/span> Protect your Android and iOS mobile devices with McAfee Mobile Security.<\/span><\/a><\/p>\n

Smishing Attack<\/span> Campaign<\/span><\/span>\u00a0<\/span><\/h2>\n

A phishing SMS message impersonating <\/span>a <\/span>power <\/span>or <\/span>water <\/span>supplier claims<\/span> a payment problem, as shown in the screenshot below. <\/span>The URL in the<\/span> message directs the victim to a phishing website<\/span> to download mobile malware<\/span>.<\/span><\/span>\u00a0<\/span><\/p>\n

\"\"<\/p>\n

Notice of suspension of power transmission <\/span>because of<\/span> non-payment of charges from <\/span>a power company in Tokyo <\/span>(Source: <\/span><\/span>Twitter<\/span><\/span><\/a>)<\/span><\/span>\u00a0<\/span><\/p>\n

\"\"<\/p>\n

Notice of suspension of water supply because of non-payment of charges from a water company in Tokyo (Source: <\/span><\/i>Twitter<\/span><\/i><\/a>)<\/span><\/i>\u00a0<\/span><\/p>\n

 <\/p>\n

When accessed with a mobile browser, it will start downloading malware and display a malware installation confirmation dialog.<\/span>\u00a0<\/span><\/p>\n

\"\"<\/p>\n

The confirmation dialog of Spyware installation via browser (Source: <\/span><\/span>Twitter<\/span><\/span><\/span><\/a>)<\/span><\/span>\u00a0<\/span><\/p>\n

SpyNote<\/span> malware<\/span><\/span>\u00a0<\/span><\/h2>\n

SpyNote is a known family of malware that proliferated after its source code was leaked in October 2022. Recently, the malware was used in a campaign <\/span>targeting financial institutions in January<\/span><\/a> and <\/span>targeting Bank of Japan in April 2023<\/span><\/a>.\u00a0<\/span>\u00a0<\/span><\/p>\n

The SpyNote malware is remotely controlled spyware that exploits accessibility services and device administrator privileges. It steals device information and sensitive user information such as device location, contacts, incoming and outgoing SMS messages, and phone calls. The malware deceives users by using legitimate app icons to look real.<\/span>\u00a0<\/span><\/p>\n

\"\"<\/p>\n

Application Icons disguised by malware.<\/span><\/i>\u00a0<\/span><\/p>\n

After launching the malware, the app opens a fake settings screen and prompts the user to enable the Accessibility feature. When the user clicks the arrow at the bottom of the screen, the system Accessibility service settings screen is displayed.<\/span>\u00a0<\/span><\/p>\n

\"\"<\/p>\n

A fake setting screen (left), system setting screen (center and right)<\/span><\/i>\u00a0<\/span><\/p>\n

By allowing the Accessibility service, the malware disables battery optimization so that it can run in the background and automatically grants unknown source installation permission to install another malware without the user’s knowledge. In addition to spying on the victim\u2019s device, it also steals two-factor authentication on Google Authenticator and Gmail and Facebook information from the infected device.<\/span>\u00a0<\/span><\/p>\n

Although the distribution method is different, the step of requesting Accessibility service after launching the app is similar to <\/span>the case of the Bank of Japan that occurred in April<\/span><\/a>.<\/span>\u00a0<\/span><\/p>\n

Scammers keep up with current events and attempt to impersonate well-known companies that have a reason to reach out to their customers.\u202fThe mobile malware attack using SpyNote discovered this time targets mobile apps for life infrastructure such as electricity and water. One of the reasons for this is that electric bills and water bills, which used to be issued on paper, are now managed on the web and mobile app. If you want to learn about smishing, consult this article \u201c<\/span>What Is Smishing? Here\u2019s How to Spot Fake Texts and Keep Your Info Safe<\/span><\/a>\u201d. McAfee Mobile Security detects this threat as Android\/SpyNote and alerts mobile users if it is present and further protects them from any data loss. For more information, visit <\/span>McAfee Mobile Security<\/span><\/a>.<\/span>\u00a0<\/span><\/p>\n

Indicators of compromise (IoC)<\/span>\u00a0<\/span><\/h2>\n

C2 Server:<\/span>\u00a0<\/span><\/p>\n

    \n
  • 104.233.210.35:27772<\/span>\u00a0<\/span><\/li>\n<\/ul>\n

    Malware Samples:<\/span>\u00a0<\/span><\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
    SHA256 Hash<\/span>\u00a0<\/span><\/td>\nPackage name<\/span>\u00a0<\/span><\/td>\nApplication name<\/span>\u00a0<\/span><\/td>\n<\/tr>\n
    075909870a3d16a194e084fbe7a98d2da07c8317fcbfe1f25e5478e585be1954<\/span>\u00a0<\/span><\/td>\ncom.faceai.boot<\/span>\u00a0<\/span><\/td>\n\u30ad\u30e3\u30ea\u30a2\u5b89\u5168\u8a2d\u5b9a<\/span>\u00a0<\/span><\/td>\n<\/tr>\n
    e2c7d2acb56be38c19980e6e2c91b00a958c93adb37cb19d65400d9912e6333f<\/span>\u00a0<\/span><\/td>\ncom.faceai.boot<\/span>\u00a0<\/span><\/td>\n\u6771\u4eac\u96fb\u529b<\/span>\u00a0<\/span><\/td>\n<\/tr>\n
    a532c43202c98f6b37489fb019ebe166ad5f32de5e9b395b3fc41404bf60d734<\/span>\u00a0<\/span><\/td>\ncom.faceai.boot<\/span>\u00a0<\/span><\/td>\n\u6771\u4eac\u96fb\u529b<\/span>TEPCO<\/span>\u00a0<\/span><\/td>\n<\/tr>\n
    cb9e6522755fbf618c57ebb11d88160fb5aeb9ae96c846ed10d6213cdd8a4f5d<\/span>\u00a0<\/span><\/td>\ncom.faceai.boot<\/span>\u00a0<\/span><\/td>\n\u6771\u4eac\u96fb\u529b<\/span>TEPCO<\/span>\u00a0<\/span><\/td>\n<\/tr>\n
    59cdbe8e4d265d7e3f4deec3cf69039143b27c1b594dbe3f0473a1b7f7ade9a6<\/span>\u00a0<\/span><\/td>\ncom.faceai.boot<\/span>\u00a0<\/span><\/td>\n\u6771\u4eac\u96fb\u529b<\/span>TEPCO<\/span>\u00a0<\/span><\/td>\n<\/tr>\n
    8d6e1f448ae3e00c06983471ee26e16f6ab357ee6467b7dce2454fb0814a34d2<\/span>\u00a0<\/span><\/td>\ncom.faceai.boot<\/span>\u00a0<\/span><\/td>\n\u6771\u4eac\u96fb\u529b<\/span>TEPCO<\/span>\u00a0<\/span><\/td>\n<\/tr>\n
    5bdbd8895b9adf39aa8bead0e3587cc786e375ecd2e1519ad5291147a8ca00b6<\/span>\u00a0<\/span><\/td>\ncom.faceai.boot<\/span>\u00a0<\/span><\/td>\n\u6771\u4eac\u96fb\u529b<\/span>TEPCO<\/span>\u00a0<\/span><\/td>\n<\/tr>\n
    a6f9fa36701be31597ad10e1cec51ebf855644b090ed42ed57316c2f0b57ea3c<\/span>\u00a0<\/span><\/td>\ncom.faceai.boot<\/span>\u00a0<\/span><\/td>\n\u6771\u4eac\u96fb\u529b<\/span>TEPCO<\/span>\u00a0<\/span><\/td>\n<\/tr>\n
    f6e2addd189bb534863afeb0d06bcda01d0174f5eac6ee4deeb3d85f35449422<\/span>\u00a0<\/span><\/td>\ncom.faceai.boot<\/span>\u00a0<\/span><\/td>\n\u6771\u4eac\u96fb\u529b<\/span>TEPCO<\/span>\u00a0<\/span><\/td>\n<\/tr>\n
    755585571f47cd71df72af0fad880db5a4d443dacd5ace9cc6ed7a931cb9c21d<\/span>\u00a0<\/span><\/td>\ncom.faceai.boot<\/span>\u00a0<\/span><\/td>\n\u6771\u4eac\u96fb\u529b<\/span>TEPCO<\/span>\u00a0<\/span><\/td>\n<\/tr>\n
    2352887e3fc1e9070850115243fad85c6f1b367d9e645ad8fc7ba28192d6fb85<\/span>\u00a0<\/span><\/td>\ncom.faceai.boot<\/span>\u00a0<\/span><\/td>\n\u6771\u4eac\u96fb\u529b<\/span>TEPCO<\/span>\u00a0<\/span><\/td>\n<\/tr>\n
    90edb28b349db35d32c0190433d3b82949b45e0b1d7f7288c08e56ede81615ba<\/span>\u00a0<\/span><\/td>\ncom.faceai.boot<\/span>\u00a0<\/span><\/td>\n\u6771\u4eac\u96fb\u529b<\/span>TEPCO<\/span>\u00a0<\/span><\/td>\n<\/tr>\n
    513dbe3ff2b4e8caf3a8040f3412620a3627c74a7a79cce7d9fab5e3d08b447b<\/span>\u00a0<\/span><\/td>\ncom.faceai.boot<\/span>\u00a0<\/span><\/td>\n\u6771\u4eac\u96fb\u529b<\/span>TEPCO<\/span>\u00a0<\/span><\/td>\n<\/tr>\n
    f6e2addd189bb534863afeb0d06bcda01d0174f5eac6ee4deeb3d85f35449422<\/span>\u00a0<\/span><\/td>\ncom.faceai.boot<\/span>\u00a0<\/span><\/td>\n\u6771\u4eac\u96fb\u529b<\/span>TEPCO<\/span>\u00a0<\/span><\/td>\n<\/tr>\n
    0fd87da37712e31d39781456c9c1fef48566eee3f616fbcb57a81deb5c66cbc1<\/span>\u00a0<\/span><\/td>\ncom.faceai.boom<\/span>\u00a0<\/span><\/td>\n\u6771\u4eac\u6c34\u9053\u5c40\u30a2\u30d7\u30ea<\/span>\u00a0<\/span><\/td>\n<\/tr>\n
    acd36f7e896e3e3806114d397240bd7431fcef9d7f0b268a4e889161e51d802b<\/span>\u00a0<\/span><\/td>\ncom.faceai.boom<\/span>\u00a0<\/span><\/td>\n\u6771\u4eac\u6c34\u9053\u5c40\u30a2\u30d7\u30ea<\/span>\u00a0<\/span><\/td>\n<\/tr>\n
    91e2f316871704ad7ef1ec74c84e3e4e41f557269453351771223496d5de594e<\/span>\u00a0<\/span><\/td>\ncom.faceai.boom<\/span>\u00a0<\/span><\/td>\n\u6771\u4eac\u6c34\u9053\u5c40\u30a2\u30d7\u30ea<\/span>\u00a0<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

    \u00a0<\/span><\/p>\n

    \u00a0<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

    Authored by Yukihiro Okutomi\u00a0 McAfee’s Mobile team observed a smishing campaign against Japanese Android users posing as a power and…<\/p>\n","protected":false},"author":695,"featured_media":170792,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[442],"tags":[],"coauthors":[4136],"class_list":["post-171750","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-mcafee-labs"],"acf":[],"yoast_head":"\nAndroid SpyNote attacks electric and water public utility users in Japan | McAfee Blog<\/title>\n<meta name=\"description\" content=\"Authored by Yukihiro Okutomi\u00a0 McAfee's Mobile team observed a smishing campaign against Japanese Android users posing as a power and water infrastructure\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Android SpyNote attacks electric and water public utility users in Japan | McAfee Blog\" \/>\n<meta property=\"og:description\" content=\"Authored by Yukihiro Okutomi\u00a0 McAfee's Mobile team observed a smishing campaign against Japanese Android users posing as a power and water infrastructure\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/android-spynote-attacks-electric-and-water-public-utility-users-in-japan\/\" \/>\n<meta property=\"og:site_name\" content=\"McAfee Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/McAfee\/\" \/>\n<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/McAfee\/\" \/>\n<meta property=\"article:published_time\" content=\"2023-07-21T07:00:03+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-11-21T15:48:40+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2022\/09\/300x200_Blog_061323.png\" \/>\n\t<meta property=\"og:image:width\" content=\"300\" \/>\n\t<meta property=\"og:image:height\" content=\"200\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"McAfee Labs\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@McAfee_Labs\" \/>\n<meta name=\"twitter:site\" content=\"@McAfee\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"McAfee Labs\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/android-spynote-attacks-electric-and-water-public-utility-users-in-japan\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/android-spynote-attacks-electric-and-water-public-utility-users-in-japan\/\"},\"author\":{\"name\":\"McAfee Labs\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/86f325fa6532a017d06d6b49a2f3b1ad\"},\"headline\":\"Android SpyNote attacks electric and water public utility users in Japan\",\"datePublished\":\"2023-07-21T07:00:03+00:00\",\"dateModified\":\"2024-11-21T15:48:40+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/android-spynote-attacks-electric-and-water-public-utility-users-in-japan\/\"},\"wordCount\":919,\"publisher\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/android-spynote-attacks-electric-and-water-public-utility-users-in-japan\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2022\/09\/300x200_Blog_061323.png\",\"articleSection\":[\"McAfee Labs\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/android-spynote-attacks-electric-and-water-public-utility-users-in-japan\/\",\"url\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/android-spynote-attacks-electric-and-water-public-utility-users-in-japan\/\",\"name\":\"Android SpyNote attacks electric and water public utility users in Japan | McAfee Blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/android-spynote-attacks-electric-and-water-public-utility-users-in-japan\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/android-spynote-attacks-electric-and-water-public-utility-users-in-japan\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2022\/09\/300x200_Blog_061323.png\",\"datePublished\":\"2023-07-21T07:00:03+00:00\",\"dateModified\":\"2024-11-21T15:48:40+00:00\",\"description\":\"Authored by Yukihiro Okutomi\u00a0 McAfee's Mobile team observed a smishing campaign against Japanese Android users posing as a power and water infrastructure\",\"breadcrumb\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/android-spynote-attacks-electric-and-water-public-utility-users-in-japan\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/android-spynote-attacks-electric-and-water-public-utility-users-in-japan\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/android-spynote-attacks-electric-and-water-public-utility-users-in-japan\/#primaryimage\",\"url\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2022\/09\/300x200_Blog_061323.png\",\"contentUrl\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2022\/09\/300x200_Blog_061323.png\",\"width\":300,\"height\":200},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/android-spynote-attacks-electric-and-water-public-utility-users-in-japan\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Blog\",\"item\":\"https:\/\/www.mcafee.com\/blogs\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Other Blogs\",\"item\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"McAfee Labs\",\"item\":\"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"Android SpyNote attacks electric and water public utility users in Japan\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#website\",\"url\":\"https:\/\/www.mcafee.com\/blogs\/\",\"name\":\"McAfee Blog\",\"description\":\"Internet Security News\",\"publisher\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.mcafee.com\/blogs\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#organization\",\"name\":\"McAfee\",\"url\":\"https:\/\/www.mcafee.com\/blogs\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2023\/02\/mcafee-logo.png\",\"contentUrl\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2023\/02\/mcafee-logo.png\",\"width\":1286,\"height\":336,\"caption\":\"McAfee\"},\"image\":{\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/McAfee\/\",\"https:\/\/x.com\/McAfee\",\"https:\/\/www.linkedin.com\/company\/mcafee\/\",\"https:\/\/www.youtube.com\/McAfee\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/86f325fa6532a017d06d6b49a2f3b1ad\",\"name\":\"McAfee Labs\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/image\/af947d76ffbef8521094b476cf8050c3\",\"url\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2017\/07\/Social-Media-PF-Logo-Pic-300x300-2-96x96.jpg\",\"contentUrl\":\"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2017\/07\/Social-Media-PF-Logo-Pic-300x300-2-96x96.jpg\",\"caption\":\"McAfee Labs\"},\"description\":\"McAfee Labs is one of the leading sources for threat research, threat intelligence, and cybersecurity thought leadership. See our blog posts below for more information.\",\"sameAs\":[\"https:\/\/www.linkedin.com\/company\/mcafee\/\",\"https:\/\/www.facebook.com\/McAfee\/\",\"https:\/\/x.com\/McAfee_Labs\"],\"url\":\"https:\/\/www.mcafee.com\/blogs\/author\/mcafee-labs\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Android SpyNote attacks electric and water public utility users in Japan | McAfee Blog","description":"Authored by Yukihiro Okutomi\u00a0 McAfee's Mobile team observed a smishing campaign against Japanese Android users posing as a power and water infrastructure","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"en_US","og_type":"article","og_title":"Android SpyNote attacks electric and water public utility users in Japan | McAfee Blog","og_description":"Authored by Yukihiro Okutomi\u00a0 McAfee's Mobile team observed a smishing campaign against Japanese Android users posing as a power and water infrastructure","og_url":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/android-spynote-attacks-electric-and-water-public-utility-users-in-japan\/","og_site_name":"McAfee Blog","article_publisher":"https:\/\/www.facebook.com\/McAfee\/","article_author":"https:\/\/www.facebook.com\/McAfee\/","article_published_time":"2023-07-21T07:00:03+00:00","article_modified_time":"2024-11-21T15:48:40+00:00","og_image":[{"width":300,"height":200,"url":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2022\/09\/300x200_Blog_061323.png","type":"image\/png"}],"author":"McAfee Labs","twitter_card":"summary_large_image","twitter_creator":"@McAfee_Labs","twitter_site":"@McAfee","twitter_misc":{"Written by":"McAfee Labs","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/android-spynote-attacks-electric-and-water-public-utility-users-in-japan\/#article","isPartOf":{"@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/android-spynote-attacks-electric-and-water-public-utility-users-in-japan\/"},"author":{"name":"McAfee Labs","@id":"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/86f325fa6532a017d06d6b49a2f3b1ad"},"headline":"Android SpyNote attacks electric and water public utility users in Japan","datePublished":"2023-07-21T07:00:03+00:00","dateModified":"2024-11-21T15:48:40+00:00","mainEntityOfPage":{"@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/android-spynote-attacks-electric-and-water-public-utility-users-in-japan\/"},"wordCount":919,"publisher":{"@id":"https:\/\/www.mcafee.com\/blogs\/#organization"},"image":{"@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/android-spynote-attacks-electric-and-water-public-utility-users-in-japan\/#primaryimage"},"thumbnailUrl":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2022\/09\/300x200_Blog_061323.png","articleSection":["McAfee Labs"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/android-spynote-attacks-electric-and-water-public-utility-users-in-japan\/","url":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/android-spynote-attacks-electric-and-water-public-utility-users-in-japan\/","name":"Android SpyNote attacks electric and water public utility users in Japan | McAfee Blog","isPartOf":{"@id":"https:\/\/www.mcafee.com\/blogs\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/android-spynote-attacks-electric-and-water-public-utility-users-in-japan\/#primaryimage"},"image":{"@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/android-spynote-attacks-electric-and-water-public-utility-users-in-japan\/#primaryimage"},"thumbnailUrl":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2022\/09\/300x200_Blog_061323.png","datePublished":"2023-07-21T07:00:03+00:00","dateModified":"2024-11-21T15:48:40+00:00","description":"Authored by Yukihiro Okutomi\u00a0 McAfee's Mobile team observed a smishing campaign against Japanese Android users posing as a power and water infrastructure","breadcrumb":{"@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/android-spynote-attacks-electric-and-water-public-utility-users-in-japan\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/android-spynote-attacks-electric-and-water-public-utility-users-in-japan\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/android-spynote-attacks-electric-and-water-public-utility-users-in-japan\/#primaryimage","url":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2022\/09\/300x200_Blog_061323.png","contentUrl":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2022\/09\/300x200_Blog_061323.png","width":300,"height":200},{"@type":"BreadcrumbList","@id":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/android-spynote-attacks-electric-and-water-public-utility-users-in-japan\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https:\/\/www.mcafee.com\/blogs\/"},{"@type":"ListItem","position":2,"name":"Other Blogs","item":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/"},{"@type":"ListItem","position":3,"name":"McAfee Labs","item":"https:\/\/www.mcafee.com\/blogs\/other-blogs\/mcafee-labs\/"},{"@type":"ListItem","position":4,"name":"Android SpyNote attacks electric and water public utility users in Japan"}]},{"@type":"WebSite","@id":"https:\/\/www.mcafee.com\/blogs\/#website","url":"https:\/\/www.mcafee.com\/blogs\/","name":"McAfee Blog","description":"Internet Security News","publisher":{"@id":"https:\/\/www.mcafee.com\/blogs\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.mcafee.com\/blogs\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.mcafee.com\/blogs\/#organization","name":"McAfee","url":"https:\/\/www.mcafee.com\/blogs\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.mcafee.com\/blogs\/#\/schema\/logo\/image\/","url":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2023\/02\/mcafee-logo.png","contentUrl":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2023\/02\/mcafee-logo.png","width":1286,"height":336,"caption":"McAfee"},"image":{"@id":"https:\/\/www.mcafee.com\/blogs\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/McAfee\/","https:\/\/x.com\/McAfee","https:\/\/www.linkedin.com\/company\/mcafee\/","https:\/\/www.youtube.com\/McAfee"]},{"@type":"Person","@id":"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/86f325fa6532a017d06d6b49a2f3b1ad","name":"McAfee Labs","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.mcafee.com\/blogs\/#\/schema\/person\/image\/af947d76ffbef8521094b476cf8050c3","url":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2017\/07\/Social-Media-PF-Logo-Pic-300x300-2-96x96.jpg","contentUrl":"https:\/\/www.mcafee.com\/blogs\/wp-content\/uploads\/2017\/07\/Social-Media-PF-Logo-Pic-300x300-2-96x96.jpg","caption":"McAfee Labs"},"description":"McAfee Labs is one of the leading sources for threat research, threat intelligence, and cybersecurity thought leadership. See our blog posts below for more information.","sameAs":["https:\/\/www.linkedin.com\/company\/mcafee\/","https:\/\/www.facebook.com\/McAfee\/","https:\/\/x.com\/McAfee_Labs"],"url":"https:\/\/www.mcafee.com\/blogs\/author\/mcafee-labs\/"}]}},"_links":{"self":[{"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/posts\/171750","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/users\/695"}],"replies":[{"embeddable":true,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/comments?post=171750"}],"version-history":[{"count":18,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/posts\/171750\/revisions"}],"predecessor-version":[{"id":205114,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/posts\/171750\/revisions\/205114"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/media\/170792"}],"wp:attachment":[{"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/media?parent=171750"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/categories?post=171750"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/tags?post=171750"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.mcafee.com\/blogs\/wp-json\/wp\/v2\/coauthors?post=171750"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}