Title |
Published |
Tags |
Description |
Number of indicators |
Technical Analysis of Copybara |
Aug. 22, 2024, 6:16 p.m. |
|
This report presents a comprehensive technical analysis of a newly discovered variant of the Copybara Android malware. The malwar… |
107 |
NGate Android malware relays NFC traffic to steal cash |
Aug. 22, 2024, 10:36 a.m. |
|
ESET researchers uncovered a crimeware campaign targeting bank customers in Czechia. The NGate Android malware can relay NFC data… |
12 |
Be careful what you wish for – Phishing in PWA applications |
Aug. 21, 2024, 6:09 p.m. |
|
ESET analysts dissected a novel phishing method tailored to Android and iOS users, combining standard phishing delivery technique… |
8 |
BlankBot: A new Android banking trojan |
Aug. 6, 2024, 10:04 a.m. |
|
A new Android banking trojan called BlankBot has been discovered. Discovered by Intel 471 researchers in July 2024, BlankBot prim… |
0 |
LianSpy: new Android spyware targeting Russian users |
Aug. 6, 2024, 10:03 a.m. |
|
Kaspersky discovered an Android spyware campaign called LianSpy that targets Russian users. The malware can capture screencasts, … |
0 |
BingoMod: The new android RAT that steals money and wipes data |
Aug. 2, 2024, 8:46 a.m. |
|
In late May 2024, a new Android Remote Access Trojan (RAT) named BingoMod emerged, aiming to initiate fraudulent money transfers … |
3 |
New Mandrake Android spyware version discovered on Google Play |
July 29, 2024, 8:36 p.m. |
|
n April 2024, Securelist discovered a suspicious sample that appeared to be a new version of Mandrake. Ensuing analysis revealed … |
9 |
GXC Team Unmasked: The cybercriminal group targeting Spanish bank users with AI-powered phishing tools and Android malware |
July 29, 2024, 12:03 p.m. |
|
Group-IB discovered a Spanish-speaking criminal group, GXC Team, offering a sophisticated AI-powered phishing-as-a-service platfo… |
161 |
The tapestry of threats targeting Hamster Kombat players |
July 24, 2024, 8:45 p.m. |
|
This analysis delves into the various malicious threats capitalizing on the immense popularity of the Hamster Kombat mobile game.… |
26 |
Cursed tapes: Exploiting the EvilVideo vulnerability on Telegram for Android |
July 23, 2024, 7:49 a.m. |
|
ESET researchers discovered a vulnerability named EvilVideo that allows attackers to share malicious Android payloads disguised a… |
1 |
Beware of BadPack: One Weird Trick Being Used Against Android Devices |
July 16, 2024, 1:03 p.m. |
|
The report examines the recent trend of BadPack Android malware, which utilizes tampered headers to obstruct analysis tools. It e… |
4 |
CapraTube Remix | Android Spyware Targeting Gamers, Weapons Enthusiasts |
July 1, 2024, 3:50 p.m. |
|
SentinelLabs has uncovered a new campaign of Android spyware apps associated with the suspected Pakistan state-aligned Transparen… |
6 |
An Android RAT targets Telegram Users |
June 28, 2024, 2:49 p.m. |
|
This analysis discusses SpyMax, a Remote Access Trojan (RAT) that targets Android devices and specifically aims at obtaining data… |
4 |
A New Compact Variant Discovered |
June 26, 2024, 8:23 a.m. |
|
Security researchers at Cleafy Labs detected a resurgence of the Medusa banking trojan, which targets Android devices for on-devi… |
50 |
RAFEL RAT, ANDROID MALWARE FROM ESPIONAGE TO RANSOMWARE OPERATIONS |
June 20, 2024, 5:50 p.m. |
|
Check Point Research has identified multiple threat actors utilizing Rafel, an open-source remote administration tool (RAT). The … |
6 |
Arid Viper poisons Android apps with AridSpy |
June 14, 2024, 8:25 a.m. |
|
ESET researchers identified five campaigns targeting Android users with trojanized apps that deploy multistage Android spyware ca… |
37 |
Fake Bahrain Government Android App Steals Personal Data Used for Financial Fraud |
June 3, 2024, 11:21 a.m. |
|
An analysis by McAfee's Mobile Research Team uncovered an Android InfoStealer malware masquerading as a government service app in… |
14 |
Android Banking Malware Distributed via Google Play Store |
May 28, 2024, 11:07 a.m. |
|
Threat actors are distributing the Anatsa Android banking malware through the Google Play store by disguising it as legitimate ap… |
4 |
Technical Analysis of Anatsa Campaigns: An Android Banking Malware Active in the Google Play Store |
May 28, 2024, 11:07 a.m. |
|
Threat actors are distributing the Anatsa Android banking malware through the Google Play store by disguising it as legitimate ap… |
0 |
New Pakistan-based Cyber Espionage Group’s Year-Long Campaign Targeting Indian Defense Forces with Android Malware |
May 6, 2024, 8:47 a.m. |
|
CYFIRMA researchers identified an Android malware campaign, active for over a year, targeting Indian defense personnel by an unid… |
3 |
SecretCalls: A Formidable App of Notorious Korean Financial Fraudster |
May 3, 2024, 11:18 a.m. |
|
Voice phishing groups in South Korea build phishing pages and apps like SecretCalls to trick victims into installing malware and … |
23 |
Playing Possum: What's the Backdoor Up To? |
May 3, 2024, 10:47 a.m. |
|
This report analyzes the Wpeeper backdoor targeting Android systems. Wpeeper utilizes compromised WordPress sites as relay C2 ser… |
98 |