Trojan app is called SpyNote and allows hackers to steal users’ messages and contacts. Trojan can also listen in on their calls, record audio using the device’s built-in microphone, control the device camera, make rogue calls and more. Trojan does not require root access to a device, but does prompt users for a long list of permissions on installation. It’s not clear yet how attackers intend to distribute it to victims, because researchers haven’t observed attacks in the wild using it. The Trojan can update itself and install other rogue applications on the device.”]

