Spymax is a malware family tracked across 2 threat clusters and 3 intelligence report mentions on ThreatCluster. First observed December 9, 2025; most recent activity December 16, 2025.
Spymax is an Android-focused malware family used to facilitate surveillance and remote control of infected devices, enabling financially motivated fraud operations. Recent reporting ties Spymax to a syndicate whose members created malware tutorials to teach others how to run scams, resulting in significant financial losses and law enforcement action, underscoring its impact on malware-enabled financial crime.
Cheoh Hai Beng, a 49-year-old Malaysian national, was sentenced to five and a half years in prison in Singapore for creating and distributing approximately 20 video tutorials on how to use malware to infect Android…
Cheoh Hai Beng, a 49-year-old Malaysian, was sentenced for producing at least 20 videos instructing others on how to use malware to scam Singaporeans. The criminal syndicate he was part of resulted in 129 victims losing…