TF-MAL-ios.wirelurker
📛 Threat Title
Malware family: WireLurker
Description
ThreatFox malware family `ios.wirelurker`. Printable name: WireLurker.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
domain
ios.wirelurker
VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/ios.wirelurker
IOC database
- Type
- domain
- Value
ios.wirelurker- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Extracted from Threat TF-MAL-ios.wirelurker
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/ios.wirelurker
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (9)
-
web:attack.mitre.org
WireLurker is a family of macOS malware that targets iOS devices connected over USB. [1]
-
web:en.wikipedia.org
WireLurker is a family of malware targeting both macOS and iOS systems. [1] The malware was designed to target users in China that use Apple mobile and desktop devices. [2]
-
web:github.com
Script for detecting the WireLurker malware family - PaloAltoNetworks/WireLurkerDetector
-
web:papers.put.as
WireLurker Workflow and Malware Progression This section summarizes WireLurker's workflow and malware progression (Figure 5), which are described in further detail in subsequent sections.
-
web:www.breachsense.com
Complete malware remediation now requires addressing both the infected endpoint and the stolen authentication data. Your malware incident response playbook must account for both.
-
web:www.cisa.gov
It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.
-
web:www.ncsc.gov.uk
How to defend organisations against malware or ransomware attacks.
-
web:www.securityweek.com
Three individuals suspected of being involved in the creation and distribution of a recently uncovered piece of malware referred to as " WireLurker " have been arrested and charged, the Beijing Municipal Bureau of Public Security said on Friday.
-
web:www.twingate.com
This malware family is particularly concerning because it automates the generation of malicious iOS applications and employs advanced techniques like file hiding, code obfuscation, and encryption to evade detection. WireLurker's discovery marked a new era in the landscape of Apple device security threats. How does WireLurker Work?
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.