Android package file
The Trojan may arrive as a package with one of the following names:
APK:
- synteo.spysat
- com.synteo.spysat
Version: 2.05
Name: Synteo SPYSAT.eu
Permissions
When the Trojan is being installed, it requests permissions to perform the following actions:
- Access location information, such as GPS information
- Open network connections
Installation
Once installed, the application will display an icon with the following text:
Synteo SPYSAT.eu
System monitoring
When the program is installed, the following information must be configured:
Next, the program gathers the following information from the device:
- GPS location
- Spysat login information
The program then periodically uploads the above information to the following remote location:
[http://]spysat.pl/dh/[REMOVED]
