Sharkbot is back in Google Play 
Tags
country: Australia Austria Germany Italy Spain Poland United Kingdom United States Of America
maec-delivery-vectors: Watering Hole
attack-pattern: Direct Credentials - T1589.001 Keylogging - T1056.001 Keylogging - T1417.001 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Server - T1583.004 Server - T1584.004
Show in Graph
Common Information
Type Value
UUID aaf4a9ba-2fdd-49f0-92a3-3d7b6df82cdc
Fingerprint 36252c0984632a09
Analysis status DONE
Considered CTI value 0
Text language
Published Sept. 6, 2022, 6:32 p.m.
Added to db Jan. 18, 2023, 8 p.m.
Last updated Nov. 12, 2024, 10:38 p.m.
Headline Sharkbot is back in Google Play
Title Sharkbot is back in Google Play 
Detected Hints/Tags/Attributes 47/3/12
Source URLs
Redirection Url
Details Source http://research.nccgroup.com/2022/09/06/sharkbot-is-back-in-google-play/
Details Source https://research.nccgroup.com/2022/09/06/sharkbot-is-back-in-google-play/
URL Provider
Details Provider Source level domain
Details nccgroup.com research.nccgroup.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 206 ✔ — https://research.nccgroup.com/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 74 
play.google.com
Details Domain 2 
mefika.me
Details Domain 2 
browntrawler.store
Details Domain 2 
23080420d0d93913.live
Details Domain 2 
7f3e61be7bb7363d.live
Details sha256 2 
7f2248f5de8a74b3d1c48be0db574b1c6558d6edae347592b29dc5234337a5ff
Details sha256 2 
870747141b1a2afcd76b4c6482ce0c3c21480ae3700d9cb9dd318aed0f963c58
Details IPv4 2 
185.212.47.113
Details Url 2 
https://play.google.com/store/apps/details?id=com.kylhavy.antivirus
Details Url 2 
https://play.google.com/store/apps/details?id=com.mbkristine8.cleanmaster
Details Url 2 
http://mefika.me
Details Url 2 
http://browntrawler.store