TF-MAL-apk.kevdroid
📛 Threat Title
Malware family: KevDroid
Description
ThreatFox malware family `apk.kevdroid`. Printable name: KevDroid.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
domain
apk.kevdroid
VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.kevdroid
IOC database
- Type
- domain
- Value
apk.kevdroid- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Extracted from Threat TF-MAL-apk.kevdroid
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.kevdroid
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (10)
-
web:arxiv.org
Our approach achieves in Android Malware Category detection more than 96 % accurate and achieves in Android Malware Family detection more than 99% accurate. Our approach provides a method for high-accuracy Dynamic Analysis of Android Malware while also shortening the time required to analyze smartphone malware .
-
web:bazaar.abuse.ch
Malware samples associated with tag Kevdroid MalwareBazaar Database Samples on MalwareBazaar are usually associated with certain tags. Every sample can associated with one or more tags. Using tags, it is easy to navigate through the huge amount of malware samples in the MalwareBazaar corpus. The page below gives you an overview on malware samples that are tagged with Kevdroid . Database Entry
-
web:blogs.cisco.com
Talos identified two variants of the Android Remote Administration Tool (RAT) with the capability to steal information on the compromised device (contacts, SMS and phone history) and record phone calls.
-
web:cybersecuritynews.com
Two sophisticated Linux rootkits are posing increasingly serious threats to network security by exploiting eBPF technology to hide their presence from traditional detection systems. BPFDoor and Symbiote, both originating from 2021, represent a dangerous class of malware that combines advanced kernel-level access with powerful evasion capabilities.
-
web:dl.acm.org
Behaviour of malware family : Malware performs various malfunctions on the victim's phone. It is essential to know about these malicious activities that they perform and characterize the families according to their behaviour.
-
web:github.com
Android - Remote Access Trojan List. Contribute to wishihab/Android-RATList development by creating an account on GitHub.
-
web:malpedia.caad.fkie.fraunhofer.de
Details for the KevDroid malware family including references, samples and yara signatures.
-
web:openhunting.io
Opensource Threat Hunting & Intelligence (Talos) Variant 1: The purpose of the application is to steal information stored on the device. Here is the list of stolen information: • Installed applications • Phone number • Phone Unique ID • Location (the application tries to switch on the GPS), this information is collected every 10 seconds, which is aggressive for this kind of spying tool ...
-
web:www.cisa.gov
It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.
-
web:www.securityweek.com
Malware & Threats New KevDroid Android Backdoor Discovered Security researchers have discovered a new Android Remote Access Trojan (RAT) that can steal a great deal of information from infected devices.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.