TF-MAL-apk.masterfred
📛 Threat Title
Malware family: MasterFred
Description
ThreatFox malware family `apk.masterfred`. Printable name: MasterFred. Aliases: Brox.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
domain
apk.masterfred
VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.masterfred
IOC database
- Type
- domain
- Value
apk.masterfred- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Extracted from Threat TF-MAL-apk.masterfred
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.masterfred
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (10)
-
web:8ksec.io
Demystify the inner workings of MasterFred,a notorious malware exploiting Android Accessibility services to steal financial and social information. Read more!
-
web:cyble.com
The Threat Actor (TA) known as Hadoken Security (a group of malware developers) is behind the development of this MasterFred malware , including Xenomorph, MaqSpy RAT, and Gymdrop dropper. Figure 1 - Hadoken Security Post Based on our detailed investigation, the sample was identified as a new variant of MasterFred , which uses Gymdrop to download Xenomorph Android Banking Trojan.
-
web:malpedia.caad.fkie.fraunhofer.de
According to heimdal, MasterFred malware , this is designed as an Android trojan that makes use of false login overlays to target not only Netflix, Instagram, and Twitter users, but also bank customers. The hackers' goal is to steal credit card information.
-
web:malware.news
Introduction Welcome to the next phase of our Mobile Malware Analysis series. In this sequel, we dive into the enigmatic maneuvers of MasterFred , a notorious malware exploiting Android Accessibility services for its nefarious objectives. Beyond financial breaches, MasterFred infiltrates social networks and vital services. Hidden HTML overlays, crafty login pages, and a labyrinth of stratagems ...
-
web:redcanary.com
Extended Berkeley Packet Filter (eBPF) is beginning to transform the Linux malware landscape. Here's what defenders should look out for.
-
web:thehackernews.com
TamperedChef malware spread via fake PDF editors from June 26 to August 21, stealing credentials and cookies.
-
web:www.breachsense.com
Complete malware remediation now requires addressing both the infected endpoint and the stolen authentication data. Your malware incident response playbook must account for both.
-
web:www.cisa.gov
It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.
-
web:www.fortinet.com
FortiGuard Labs discovered new Symbiote and BPFDoor variants exploiting eBPF filters to enhance stealth through IPv6 support, UDP traffic, and dynamic port hopping for covert C2 communication.
-
web:www.ncsc.gov.uk
How to defend organisations against malware or ransomware attacks.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.