GMBot: Android poor man’s “webinjects”
Tags
country: Australia Russia
maec-delivery-vectors: Watering Hole
attack-pattern: Data Model Javascript - T1059.007 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566
Show in Graph
Common Information
Type Value
UUID 1643c5a3-9e5c-4c9c-8109-e6759009ea2b
Fingerprint b62b3d9b19336fdf
Analysis status DONE
Considered CTI value 0
Text language
Published Oct. 2, 2015, midnight
Added to db Nov. 9, 2023, 1:50 a.m.
Last updated Nov. 8, 2024, 12:42 a.m.
Headline Social media
Title GMBot: Android poor man’s “webinjects”
Detected Hints/Tags/Attributes 26/3/14
Source URLs
Redirection Url
Details Source https://cert.pl/en/posts/2015/10/gmbot-android-poor-mans-webinjects/
Details Source https://www.cert.pl/en/news/single/gmbot-android-poor-mans-webinjects/
URL Provider
Details Provider Source level domain
Details cert.pl www.cert.pl
Details cert.pl cert.pl
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 81 ✔ CERT Polska https://cert.pl/en/rss.xml 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 188 
com.android
Details Domain 4 
com.google.android.music
Details Domain 17 
com.instagram.android
Details Domain 26 
com.skype
Details Domain 17 
com.google.android.gm
Details Domain 24 
com.commbank.netbank
Details Domain 4 
com.cba.android.netbank
Details Domain 21 
au.com.nab.mobile
Details Domain 19 
org.westpac.bank
Details Domain 20 
org.stgeorge.bank
Details Domain 12 
st.george
Details File 12 
st.geo
Details sha256 1 
ac256d630594fd4335a8351b6a476af86abef72c0342df4f47f4ae0f382543ba
Details sha256 1 
62f1a06272b4db982083806c0264f74f4b1339fbd5acfe22ab5d0f0a4ef0a718