TF-MAL-apk.vinethorn
📛 Threat Title
Malware family: VINETHORN
Description
ThreatFox malware family `apk.vinethorn`. Printable name: VINETHORN.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
domain
apk.vinethorn
VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.vinethorn
IOC database
- Type
- domain
- Value
apk.vinethorn- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Extracted from Threat TF-MAL-apk.vinethorn
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.vinethorn
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (10)
-
web:apt.etda.or.th
Tool: VINETHORN Last change to this tool card: 22 June 2023 ... Download this tool card in JSON format
-
web:attack.mitre.org
APT42 is an Iranian-sponsored threat group that conducts cyber espionage and surveillance. [1] The group primarily focuses on targets in the Middle East region, but has targeted a variety of industries and countries since at least 2015. [1] APT42 starts cyber operations through spearphishing emails and/or the PINEFLOWER Android malware , then monitors and collects information from the ...
-
web:bazaar.abuse.ch
Using tags, it is easy to navigate through the huge amount of malware samples in the MalwareBazaar corpus. The page below gives you an overview on malware samples that are tagged with VINETHORN .
-
web:cybersecuritynews.com
Two sophisticated Linux rootkits are posing increasingly serious threats to network security by exploiting eBPF technology to hide their presence from traditional detection systems. BPFDoor and Symbiote, both originating from 2021, represent a dangerous class of malware that combines advanced kernel-level access with powerful evasion capabilities.
-
web:malpedia.caad.fkie.fraunhofer.de
According to Mandiant, VINETHORN is an Android malware family capable of a wide range of backdoor functionality. It can steal system information, read SMS inboxes, send SMS messages, access contact lists and call histories, record audio and video, and track device location via GPS.
-
web:marqcodes.com
The Growing Threat of Android Malware Android remains the most targeted operating system due to its massive global user base. Malware authors leverage its open nature and user negligence to deploy malware like VINETHORN , capable of sophisticated data theft and persistent surveillance. According to recent reports, spyware targeting Android has increased by nearly 35% in the past year, with ...
-
web:openhunting.io
(Mandiant) VINETHORN is an Android malware family capable of a wide range of backdoor functionality. It can steal system information, read SMS inboxes, send SMS messages, access contact lists and call histories, record audio and video, and track device location via GPS.
-
web:services.google.com
APT42 likely delivers its Android malware such as VINETHORN and PINEFLOWER via text messages. Between July 2020 and March 2021, the group successfully used PINEFLOWER Android malware to compromise several dozen Android devices we believe belong to individuals residing in Iran.
-
web:www.cisa.gov
It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.
-
web:www.ncsc.gov.uk
How to defend organisations against malware or ransomware attacks.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.