Security researchers have identified a large-scale SpyNote malware campaign targeting banking applications in 15 countries across Europe and Asia. The malware, distributed through fake security update notifications, is capable of intercepting SMS messages, recording calls, and stealing banking credentials.

Over 200,000 devices are estimated to be infected, with victims spread across Germany, France, Turkey, and 12 other countries. The malware communicates with command-and-control servers hosted in multiple jurisdictions, complicating takedown efforts.