TF-MAL-apk.agentsmith

Description

ThreatFox malware family `apk.agentsmith`. Printable name: Agent Smith.

Indicators of Compromise (1)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

References (1)

• ThreatFox: IOCs for this family ThreatFox Malwares

• Agent Smith Malware Attack | Find and Remove from Mobile Devices - Comodo
  web:antivirus.comodo.com

  Know about what is Agent Smith malware attack and how it is used to infect apps on android phones. Use Comodo antivirus to remove Agent Smith virus attack.

  2026-05-22 01:07 UTC
• Agent Smith, Software S0440 | MITRE ATT&CK®
  web:attack.mitre.org

  Agent Smith is mobile malware that generates financial gain by replacing legitimate applications on devices with malicious versions that include fraudulent ads.

  2026-05-22 01:07 UTC
• Agent Smith Malware Hits 25 Million Android Devices | Avast
  web:blog.avast.com

  Bad actors have pushed variants of the Agent Smith malware to users through unofficial Android app stores, infecting up to 25 million devices, Bleeping Computer reported. Security analysts identified over 360 different dropper strains of the malware , being distributed in malicious game, photo, and adult content apps for over two years.

  2026-05-22 01:07 UTC
• Agent Smith: A New Species of Mobile Malware
  web:research.checkpoint.com

  The " Agent Smith " campaign is primarily targeted at Indian users, who represent 59% of the impacted population. Unlike previously seen non-GP (Google Play) centric malware campaigns, " Agent Smith " has a significant impact upon not only developing countries but also some developed countries where GP is readily available.

  2026-05-22 01:07 UTC
• Matrix Alert: Agent Smith Malware Silently Infects 25M Android Devices
  web:sensorstechforum.com

  During the third stage, the core part of Agent Smith malware will attack each installed application on the compromised Android device, according to its target list. "The core malware quietly extracts a given innocent application's APK file, patches it with extra malicious modules and finally abuses a further set of system vulnerabilities to silently swap the innocent version with a ...

  2026-05-22 01:07 UTC
• 25 Million Android Devices Infected by 'Agent Smith' Malware
  web:www.bleepingcomputer.com

  Around 25 million devices have already been infected with what researchers have dubbed " Agent Smith ," after users installed an app from an unofficial Android store.

  2026-05-22 01:07 UTC
• Cyber Swachhta Kendra: Android - Agent Smith - CSK
  web:www.csk.gov.in

  It has been observed that a new malware named as " Agent Smith " targeting android devices is spreading widely. The malware has the capability to automatically replace the installed apps of the infected/targeted device to malicious versions without the user knowledge. It has also been counted that the malware has infected nearly 25 million mobile devices all over the world. The malware ...

  2026-05-22 01:07 UTC
• 'Agent Smith' malware that secretly replaces WhatsApp spreads to ...
  web:www.independent.co.uk

  A new type of mobile malware that secretly replaces popular apps like WhatsApp on people's phones has already infected more than 25 million devices, security researchers have revealed.

  2026-05-22 01:07 UTC
• Agent Smith materializes from the matrix of Android malware
  web:www.manageengine.com

  Th ere's a new shapeshifting strain of Android malware in the mix. It replaces legitimate apps with compromised ones and is imaginatively named Agent Smith after the iconic villain in The Matrix. Yet another malware attack targeting Android—so what's the big deal? Agent Smith is similar to other malware campaigns such as Gooligan, HummingBad, and CopyCat with respect to the destruction ...

  2026-05-22 01:07 UTC
• Agent Smith: Is Your Phone Infected by This Malware Already?
  web:www.techjockey.com

  To add to the woes, mobile malware detection is not possible as the malware hides itself by taking the form of these applications. How Does the Agent Smith Malware Work? Taking advantage of its capability of becoming virtually invisible, this malware can easily navigate between apps and steal various types of app data and identities.

  2026-05-22 01:07 UTC

Only Available for Registered Users. Sign in to view.