TF-MAL-apk.fakeadblocker
📛 Threat Title
Malware family: FakeAdBlocker
Description
ThreatFox malware family `apk.fakeadblocker`. Printable name: FakeAdBlocker.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
domain
apk.fakeadblocker
VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.fakeadblocker
IOC database
- Type
- domain
- Value
apk.fakeadblocker- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Extracted from Threat TF-MAL-apk.fakeadblocker
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.fakeadblocker
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (10)
-
web:cyberguy.com
A fake ad-blocking browser extension is deliberately crashing Chrome and Edge to trick users into running malware on their own PCs.
-
web:forums.malwarebytes.com
my passswords were all recently leaked, and windows defender was detecting malware , so i downloaded malwarebytes and now i am getting tons of malware popups blocked and need help finding the source so they stop coming back windows 11
-
web:sra.io
This advisory examines how ClickFix operates, documents active campaigns, and provides detection strategies and mitigation recommendations. What is ClickFix? ClickFix is a social engineering tactic that tricks users into executing malicious code through a series of deceptive prompts. The attack typically begins with the following sequence: 1.
-
web:technijian.com
Our experts evaluate your current browser security policies, extension management practices, and employee awareness levels to create a complete picture of your security posture. If you've experienced a CrashFix infection or suspect malware on your systems, our incident response team provides rapid malware removal and system remediation services.
-
web:www.bleepingcomputer.com
A malvertising campaign is using a fake ad-blocking Chrome and Edge extension named NexShield that intentionally crashes the browser in preparation for ClickFix attacks.
-
web:www.first.org
Introduction Overview The Malware Analysis Framework, developed by FIRSTs Malware Analysis Special Interest Group (SIG), is a document aimed to help CSIRTs establish their own malware analysis workflow (s). It provides step-by-step guidance in all workflow phases on how to develop malware analysis capabilities within CSIRTs. This document also lists supporting resources that can further assist ...
-
web:www.malwarebytes.com
This could open up the ability to install even more malware . Protection Malwarebytes for Android protects against Android/Trojan.FakeAdsBlock. Remediation Android/Trojan.FakeAdsBlock is extremely hard to find on the mobile device once installed. That is where Malwarebytes for Android can help you, by identifying these apps and removing them.
-
web:www.microsoft.com
The ClickFix social engineering technique has been growing in popularity, with campaigns targeting thousands of enterprise and end-user devices daily. This technique exploits users' tendency to resolve technical issues by tricking them into running malicious commands. These commands, in turn, deliver payloads that ultimately lead to information theft and exfiltration.
-
web:www.ncsc.gov.uk
How to defend organisations against malware or ransomware attacks.
-
web:www.pcworld.com
News This fake ad blocker malware impersonated uBlock Origin's developer An ad blocker that was hosted on the Chrome Web Store falsely claimed its code was written by Raymond Hill.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.