ThreatLabZ research team came across a fake Netflix app, which turned out to be a new variant of SpyNote RAT (Remote Access Trojan) The spyware is capable of performing a variety of alarming functions that includes: listening to live conversations and reading SMS messages. The malware developer can root the device using a range of vulnerabilities, well-known or zero-day vulnerabilities, to spread the spyware. SpyNote Trojan uses an unusual trick to make sure that it remains up and running and that the spying does not stop.”]

Source: https://www.zscaler.com/blogs/security-research/spynote-rat-posing-netflix-app