Android phones are in danger because of an extremely serious threat that has been discovered, and that targets many people all over the world, and this is because we are talking about a new type of malware that has the name SOVA, and that was thought to steal people's bank details.
Android phones that are infected with SOVA, owl in Russian, can have absolutely all information extracted by hackers, while everything we type can be monitored by them, notifications can be faked, and phones can be used even for DDoS attacks against online infrastructures.
SOVA has been discovered for some time, it was initially thought to infect Android phones from the USA, Russia, or Spain, but in July it was discovered that several countries in Eastern Europe have entered the sights of hackers who want to steal people's money, and to extract various other types of information from phones.
Android phones can have false login interfaces displayed in mobile banking applications that send the entered data directly to hackers, can have stolen sessions for unauthorized access to accounts from various online platforms, and even much more than that, all without the victims knowing what happens.
SOVA is the Russian word for owl. This name was chosen by the threat actor himself, possibly due to the owl's nature as nocturnal birds of prey, quiet but effective in tracking and capturing their victims.
SOVA contains features that are usually available in current Android malware, including: overlay attacks, key logging, notification manipulation, In addition, it stands out with a feature that is not as common in Android malware: Cookie theft- session hours. This functionality allows criminals to gain access to valid login sessions from users without needing to know banking credentials. Threatfabric experts support.
