SOVA was earlier focusing on countries like US, Russia, and Spain, but in July 2022 it added several other countries including India to its list of targets.
The new mobile banking 'Trojan' virus - SOVA - that can secretly encrypt an Android phone for ransom and is difficult to uninstall, is targetin