Lookout Uncovers Android Spyware Deployed in Kazakhstan
Tags
country: Bangladesh Chile Germany Pakistan Italy Kazakhstan Mongolia Myanmar Vietnam Syria Turkmenistan
attack-pattern: Data Direct Exploits - T1587.004 Exploits - T1588.005 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Sms Messages - T1636.004 Social Media - T1593.001 Vulnerabilities - T1588.006 Connection Proxy - T1090
Show in Graph
Common Information
Type Value
UUID 6423c996-a9f2-44fd-b4bd-420486a77fcd
Fingerprint be1099130b319780
Analysis status DONE
Considered CTI value 0
Text language
Published April 18, 2022, midnight
Added to db Sept. 11, 2022, 12:48 p.m.
Last updated Nov. 17, 2024, 6:50 p.m.
Headline Lookout Uncovers Android Spyware Deployed in Kazakhstan
Title Lookout Uncovers Android Spyware Deployed in Kazakhstan
Detected Hints/Tags/Attributes 93/2/7
Source URLs
Redirection Url
Details Source https://www.lookout.com/blog/hermit-spyware-discovery
URL Provider
Details Provider Source level domain
Details lookout.com www.lookout.com
Attributes
Details Type #Events CTI Value
Details Domain 3 
oppo-kz.custhelp.com
Details Domain 3 
rojavanetwork.info
Details IPv4 4 
45.148.30.122
Details IPv4 3 
85.159.27.61
Details IPv4 3 
93.51.226.53
Details IPv4 1441 
127.0.0.1
Details Url 3 
http://oppo-kz.custhelp.com