TF-MAL-apk.knspy
📛 Threat Title
Malware family: KnSpy
Description
ThreatFox malware family `apk.knspy`. Printable name: KnSpy.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
domain
apk.knspy
VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.knspy
IOC database
- Type
- domain
- Value
apk.knspy- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Extracted from Threat TF-MAL-apk.knspy
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.knspy
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (10)
-
web:arxiv.org
Abstract Determining the family to which a malicious file belongs is an es-sential component of cyberattack investigation, attribution, and remediation . Performing this task manually is time consuming and requires expert knowledge. Automated tools using that label mal-ware using antivirus detections lack accuracy and/or scalability, making them insuficient for real-world applications. Three ...
-
web:cybersecuritynews.com
Two sophisticated Linux rootkits are posing increasingly serious threats to network security by exploiting eBPF technology to hide their presence from traditional detection systems. BPFDoor and Symbiote, both originating from 2021, represent a dangerous class of malware that combines advanced kernel-level access with powerful evasion capabilities.
-
web:halilozturkci.com
Those three demand the bulk of our airtime. But we also need to cover Ghostwriter's new campaign against Ukraine — fresh OYSTER malware family , Prometheus lures, multi-stage kill chain — and ShinyHunters claiming 42 million Charter Communications records with a May 27 deadline that's four days away. On Ubiquiti — we covered this yesterday.
-
web:learn.microsoft.com
When you look up this malware name in the Microsoft Defender Security Intelligence website, you find information specific to that malware , including technical details and mitigation steps.
-
web:malpedia.caad.fkie.fraunhofer.de
Details for the KnSpy malware family including references, samples and yara signatures.
-
web:snyk.io
Meta description: Malicious versions of the Axios npm package (1.14.1 and 0.30.4) were published via a compromised maintainer account, injecting a hidden dependency that deploys a cross-platform remote access trojan. Here's what happened, who's affected, and how to check your exposure.
-
web:windowsforum.com
The emergence of RESURGE signals more than just another entry in a long line of malware threats. According to CISA, RESURGE contains advanced persistence features inherited from the SPAWNCHIMERA malware family—a group notorious for its ability to survive system reboots and avoid simplistic remediation .
-
web:www.cisa.gov
It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.
-
web:www.ncsc.gov.uk
How to defend organisations against malware or ransomware attacks.
-
web:www.rescana.com
A critical security incident affecting the Notepad++ text editor was identified between June and December 2025, in which the official update mechanism was hijacked to deliver malware to select users.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.