TF-MAL-apk.blankbot
📛 Threat Title
Malware family: BlankBot
Description
ThreatFox malware family `apk.blankbot`. Printable name: BlankBot.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
domain
apk.blankbot
VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.blankbot
IOC database
- Type
- domain
- Value
apk.blankbot- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Extracted from Threat TF-MAL-apk.blankbot
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.blankbot
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (10)
-
web:cybernews.com
The FBI warns of a surge in ATM jackpotting attacks, with more than 700 incidents in 2025 alone. Hackers use Ploutus malware to force machines to dispense cash.
-
web:github.com
Android - Remote Access Trojan List. Contribute to wishihab/Android-RATList development by creating an account on GitHub.
-
web:malpedia.caad.fkie.fraunhofer.de
Details for the BlankBot malware family including references, samples and yara signatures.
-
web:malwaretips.com
BlankBot is an information-stealing Trojan - a type of malware that resides in an infected computer and gathers data in order to send it to the attacker. Typical targets are credentials used in online banking services, social media sites, emails, or FTP accounts.
-
web:www.cybermaterial.com
BlankBot's design is centered around exploitation of Android's accessibility services, granting the malware full control over a compromised device. Once installed, the malware is able to secretly record screen activity, log keystrokes, and create malicious overlays that trick users into disclosing sensitive information.
-
web:www.forbes.com
This new Android malware threat hides from antivirus view while grabbing everything from text messages to PIN codes and bank card information. Say hello to BlankBot .
-
web:www.globalsecuritymag.fr
BlankBot is a newly discovered Android banking trojan identified by Intel 471 Malware Intelligence researchers in July 2024. This sophisticated malware targets Android devices, primarily focused on Turkish users but capable of broader geographical attacks. BlankBot aims to produce profit for attackers by exfiltrating banking credentials. The trojan disguises itself as legitimate applications ...
-
web:www.intel471.com
Key Points: In July 2024, Intel 471 Malware Intelligence researchers discovered the new BlankBot Android banking trojan. Based on the application names and certain strings found within the application, it is highly likely BlankBot's primary targets are Turkish users. BlankBot features a range of malicious capabilities, which include customer injections, keylogging, screen recording and it ...
-
web:www.pcrisk.com
BlankBot malware overview BlankBot has anti-analysis abilities, such as detecting when it is launched on virtual machines. Additionally, parts of the trojan's code are obfuscated and include code bloat. As most Android-targeting programs, BlankBot abuses the Android Accessibility Services.
-
web:www.securityweek.com
Malware & Threats New BlankBot Android Trojan Can Steal User Data The BlankBot Android trojan exfiltrates user data, executes C&C commands, and supports custom injections, keylogging, and screen recording.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.