AppLite: A New AntiDot Variant Targeting Mobile Employee Devices
Dec. 11, 2024, 7:35 p.m.
Tags
External References
Description
A sophisticated Mishing campaign delivers malware to Android devices, enabling credential theft from banking, cryptocurrency, and critical applications. The campaign uses phishing domains to distribute a new variant of the Antidot banking trojan, dubbed AppLite Banker. Attackers pose as recruiters, tricking victims into downloading a malicious app that installs AppLite. The malware can mimic enterprise apps, Chrome, and TikTok, allowing for device takeover and application access. It uses advanced techniques like ZIP manipulation, websocket communication, and overlay attacks to evade detection and steal credentials. AppLite targets users in multiple languages and focuses on banking, cryptocurrency, and finance apps across various countries.
Date
Published: Dec. 11, 2024, 7:12 p.m.
Created: Dec. 11, 2024, 7:12 p.m.
Modified: Dec. 11, 2024, 7:35 p.m.
Indicators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.espanasistemas.es
shipum.canadasystems.net
raisingthevillage.system-crm.com
rincon.espanasistemas.es
parcelow-gift-card.parcelow.com
chancypet.system-crm.com
nartex.espanasistemas.es
wearelookingforjob.com
venusimperativa.online
vipapp.click
upjobs.click
suncorcareers.ca
sprintcargoservice.com
smartworkcrm.com
sikhfamilyfoodvan.org.au
optus-technologies.site
mtrolsconsulting.com
masupoltd.pro
jeirosirjjtd.fun
ireopsmrert.info
ifilautosit.online
goldjonseyrjd.me
freedomobile.org
euskaltel.co
estudiaytrabajaencanada.com
downloadcrm.pro
downloadcrm.cloud
cisp.ca
canadian-tire.co
canadasystems.net
businessandfinance.pro
bizviz.com.au
babalharra.com.au
applications-telefonica.com
appcloudy.shop
anmavelco.online
Attack Patterns
antidot
applite banker
Additional Informations
Technology
Finance
Portugal
Australia
Spain
Canada
United States of America