新银行木马“Eventbot”，影响234个金融应用
Tags
| country: | Germany |
| attack-pattern: | Server - T1583.004 Server - T1584.004 |
Common Information
| Type | Value |
|---|---|
| UUID | dc443fdc-4611-46d3-8013-3026da8feaf7 |
| Fingerprint | fbd0c77e8823c791 |
| Analysis status | DONE |
| Considered CTI value | 2 |
| Text language | |
| Published | March 25, 2020, midnight |
| Added to db | Dec. 20, 2024, 9:49 p.m. |
| Last updated | Dec. 25, 2024, 10:29 a.m. |
| Headline | 新银行木马“Eventbot”，影响234个金融应用 |
| Title | 新银行木马“Eventbot”，影响234个金融应用 |
| Detected Hints/Tags/Attributes | 23/2/144 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://www.secrss.com/articles/18116 |
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 4 | themoil.site |
|
| Details | Domain | 4 | ora.carlaarrabitoarchitetto.com |
|
| Details | Domain | 4 | ora.studiolegalebasili.com |
|
| Details | Domain | 28 | es.lacaixa.mobile.android |
|
| Details | Domain | 7 | com.tabtrader.android |
|
| Details | Domain | 19 | com.grppl.android.shell |
|
| Details | Domain | 2 | com.cryptotab.android |
|
| Details | Domain | 2 | cedacri.mobile.bank |
|
| Details | Domain | 3 | ch.postfinance.android |
|
| Details | Domain | 9 | co.mona.android |
|
| Details | Domain | 19 | com.caisseepargne.android |
|
| Details | Domain | 10 | com.fullsix.android |
|
| Details | Domain | 8 | uk.co.metrobankonline.mobile.android |
|
| Details | Domain | 8 | com.arkea.android |
|
| Details | Domain | 7 | com.todo1.mobile |
|
| Details | Domain | 64 | co.uk |
|
| Details | Domain | 30 | com.bbva |
|
| Details | Domain | 5 | it.hype.app |
|
| Details | Domain | 2 | com.spot.spot |
|
| Details | Domain | 5 | it.icbpi.mobile |
|
| Details | Domain | 9 | uk.co.hsbc |
|
| Details | Domain | 2 | com.swftcoin.client.android |
|
| Details | Domain | 4 | com.monitise.client.android |
|
| Details | Domain | 7 | im.token.app |
|
| Details | Domain | 7 | co.bitx.android |
|
| Details | Domain | 16 | net.inverline.bancosabadell.officelocator.android |
|
| Details | Domain | 26 | uk.co |
|
| Details | Domain | 13 | it.ingdirect.app |
|
| Details | Domain | 4 | ch.raiffeisen.android |
|
| Details | Domain | 14 | it.copergmps.rt.pf.android |
|
| Details | Domain | 4 | com.ie.capitalone.uk |
|
| Details | Domain | 2 | com.barclaycard |
|
| Details | Domain | 8 | com.changelly.app |
|
| Details | Domain | 18 | mobi.societegenerale.mobile |
|
| Details | Domain | 2 | com.opentecheng.android |
|
| Details | Domain | 24 | com.kutxabank.android |
|
| Details | Domain | 6 | io.cex.app.prod |
|
| Details | Domain | 4 | btg.org.freewallet.app |
|
| Details | Domain | 2 | it.bper.mobile |
|
| Details | Domain | 2 | com.cryptonator.android |
|
| Details | Domain | 2 | io.kriptomat.app |
|
| Details | Domain | 2 | lt.lemonlabs.android |
|
| Details | Domain | 13 | com.citibank.mobile.au |
|
| Details | Domain | 2 | com.libertex.mobile |
|
| Details | Domain | 7 | io.getdelta.android |
|
| Details | Domain | 3 | com.starlingbank.android |
|
| Details | Domain | 2 | ltcc.org.freewallet.app |
|
| Details | Domain | 2 | com.aci.ocean.mobile |
|
| Details | Domain | 7 | com.polehin.android |
|
| Details | Domain | 4 | eth.org.freewallet.app |
|
| Details | Domain | 2 | com.bitrue.currency.exchange |
|
| Details | Domain | 2 | com.monitise.coop |
|
| Details | Domain | 5 | btc.org.freewallet.app |
|
| Details | Domain | 22 | piuk.blockchain.android |
|
| Details | Domain | 2 | it.bancagenerali.mobile |
|
| Details | Domain | 3 | au.com.heritage.app |
|
| Details | Domain | 2 | com.niyo.global |
|
| Details | Domain | 2 | com.twogetherbank.app |
|
| Details | Domain | 6 | com.payoneer.android |
|
| Details | Domain | 3 | com.monese.monese.live |
|
| Details | Domain | 6 | doge.org.freewallet.app |
|
| Details | Domain | 2 | ftb.ibank.android |
|
| Details | Domain | 2 | com.fideuram.phone |
|
| Details | Domain | 3 | com.coinmarketcap.android |
|
| Details | Domain | 4 | clientapp.swiftcom.org |
|
| Details | Domain | 4 | it.gruppobper.ams.android |
|
| Details | Domain | 6 | com.mediolanum.android |
|
| Details | Domain | 2 | com.mercuryo.app |
|
| Details | Domain | 2 | mw.org.freewallet.app |
|
| Details | Domain | 2 | com.illimity.mobile |
|
| Details | Domain | 7 | com.enjin.mobile |
|
| Details | Domain | 2 | com.bitnovo.app |
|
| Details | Domain | 20 | com.starfinanz.smob.android |
|
| Details | Domain | 2 | com.ie.vanquis.interact.shell |
|
| Details | Domain | 2 | com.swissborg.android.community |
|
| Details | Domain | 29 | com.binance.dev |
|
| Details | Domain | 16 | com.barclays.android |
|
| Details | Domain | 7 | co.edgesecure.app |
|
| Details | Domain | 26 | com.coinbase.android |
|
| Details | Domain | 2 | at.paysafecard.android |
|
| Details | Domain | 2 | it.cabel.mito.mimo.android |
|
| Details | Domain | 2 | cloud.money |
|
| Details | Domain | 8 | com.electroneum.mobile |
|
| Details | Domain | 10 | net.bitstamp.app |
|
| Details | Domain | 2 | com.tescobank.mobile |
|
| Details | Domain | 10 | de.number26.android |
|
| Details | Domain | 8 | com.cajaingenieros.android |
|
| Details | Domain | 9 | lt.spectrofinance.spectrocoin.android |
|
| Details | Domain | 12 | app.wizink.es |
|
| Details | Domain | 28 | com.commbank.netbank |
|
| Details | Domain | 3 | com.barclays |
|
| Details | Domain | 6 | aib.ibank.android |
|
| Details | Domain | 7 | it.volksbank.android |
|
| Details | Domain | 6752 | 163.com |
|
| Details | File | 2 | ownrwallet.wallet |
|
| Details | File | 9 | com.tab |
|
| Details | File | 59 | com.pl |
|
| Details | File | 4 | utus.wallet |
|
| Details | File | 2 | it.cs |
|
| Details | File | 7 | paxful.wallet |
|
| Details | File | 2 | eidoo.wallet |
|
| Details | File | 9 | schildbach.wallet |
|
| Details | File | 35 | com.db |
|
| Details | File | 3 | com.swf |
|
| Details | File | 10 | android.wallet |
|
| Details | File | 2 | darkcoin.wallet |
|
| Details | File | 8 | bancsabadell.wallet |
|
| Details | File | 15 | sp.bmp |
|
| Details | File | 2 | cobo.wallet |
|
| Details | File | 2 | conio.wallet |
|
| Details | File | 30 | com.tar |
|
| Details | File | 2 | coinomi.wallet |
|
| Details | File | 12 | bitpay.wallet |
|
| Details | File | 4 | totalcoin.wallet |
|
| Details | File | 2 | ethereum.safe |
|
| Details | File | 2 | ftb.ibank |
|
| Details | File | 4 | clientapp.swift |
|
| Details | File | 2 | usdx.wallet |
|
| Details | File | 14 | mycelium.wallet |
|
| Details | File | 10 | com.wav |
|
| Details | File | 8 | esplatform.wallet |
|
| Details | File | 7 | mobile.wallet |
|
| Details | File | 38 | com.bin |
|
| Details | File | 14 | com.wallet |
|
| Details | File | 2 | magnum.wallet |
|
| Details | File | 2 | it.cab |
|
| Details | File | 29 | com.cs |
|
| Details | File | 6 | g.cs |
|
| Details | File | 6 | aib.ibank |
|
| Details | File | 2 | celsius.wallet |
|
| Details | md5 | 2 | F73F66B15791A42DAC86D0CED46D660F |
|
| Details | md5 | 2 | 7107AC3BCCD8DB274B21F0E494E3ECCC |
|
| Details | md5 | 2 | 8A563B6AF3CF74C8CBB88B99E104D949 |
|
| Details | md5 | 2 | 7F5D728119951839B46895808107B281 |
|
| Details | md5 | 2 | B3F4746A6C21D030D2B73FF2AC3CEC2F |
|
| Details | md5 | 2 | 66AE6BB78ED76B252C2EA6EC8072B0E8 |
|
| Details | md5 | 2 | 664118A72533D9A0D60E9CABA439FE28 |
|
| Details | md5 | 2 | E1229D332CA43AC2B640084A0DAE9BBE |
|
| Details | md5 | 2 | 8793359481AB88914B5E60625F57277C |
|
| Details | md5 | 2 | 36988753860CD9F919B9D2A94C0AF0FC |
|
| Details | Url | 94 | https://sandbox.ti.qianxin.com/sandbox/page |
|
| Details | Url | 4 | http://themoil.site/gate_cb8a5aea1ab302f0_c |
|
| Details | Url | 4 | http://ora.carlaarrabitoarchitetto.com/gate_cb8a5aea1ab302f0_c |
|
| Details | Url | 4 | http://ora.studiolegalebasili.com/gate_cb8a5aea1ab302f0_c |