SOVA Android Banking Trojan

SOVA is new emerging mobile banking Trojan targeting Android mobiles. SOVA is a Russian word for Owl. SOVA comes with Overlay attacks, Keylogging and Notification manipulation. It also comes with a new addition of Session cookies theft which is used to hijack logged in user and access their data with out need for credentials. As of now there are two versions of SOVA in the wild.

SOVA V1 Signatures

Family: Trojan:AndroidOS/Multiverze
MD5: 01b6f0220794476fe19a54c049600ab3
SHA256: 8a6889610a18296e812fabd0a4ceb8b75caadc5cec1b39e8173c3e0093fd3a57

SOVA V1 Download

SOVA V1 Signatures

Family: Trojan:AndroidOS/Multiverze
MD5: 1698651d6b8fd95574f62b046b4f68e5
SHA256: dd8a5a1a8632d661f152f435b7afba825e474ec0d03d1c5ef8669fdc2b484165

SOVA V1 Download