New Android spyware targets users in Pakistan
Tags
country: Bulgaria Netherlands Pakistan Latvia
attack-pattern: Data Contact List - T1636.003 Credentials - T1589.001 Defacement - T1491 Dynamic Dns - T1311 Dynamic Dns - T1333 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Sms Messages - T1636.004
Show in Graph
Common Information
Type Value
UUID abfc392a-9863-4b91-a10c-24e2d7e87271
Fingerprint b405911193b2268b
Analysis status DONE
Considered CTI value 0
Text language
Published Jan. 12, 2021, 2 p.m.
Added to db Sept. 11, 2022, 12:30 p.m.
Last updated Nov. 14, 2024, 6:08 a.m.
Headline New Android spyware targets users in Pakistan
Title New Android spyware targets users in Pakistan
Detected Hints/Tags/Attributes 69/2/9
Source URLs
Redirection Url
Details Source https://news.sophos.com/en-us/2021/01/12/new-android-spyware-targets-users-in-pakistan/
URL Provider
Details Provider Source level domain
Details sophos.com news.sophos.com
Attributes
Details Type #Events CTI Value
Details Domain 1 
pmdu.info
Details Domain 4 
gov.pk
Details Domain 188 
com.android
Details Domain 1 
pakchat.online
Details Domain 1 
tplinsurance.xyz
Details Domain 1 
kv33.zapto.org
Details File 1 
pmdu.inf
Details File 172 
androidmanifest.xml
Details IPv4 1 
5.2.78.240