TF-MAL-apk.skygofree
📛 Threat Title
Malware family: Skygofree
Description
ThreatFox malware family `apk.skygofree`. Printable name: Skygofree.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
domain
apk.skygofree
VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.skygofree
IOC database
- Type
- domain
- Value
apk.skygofree- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Extracted from Threat TF-MAL-apk.skygofree
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.skygofree
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (10)
-
web:attack.mitre.org
Skygofree is Android spyware that is believed to have been developed in 2014 and used through at least 2017. [1]
-
web:howtoremove.guide
Recently, the Kaspersky Lab research team discovered and reported the existence of an Android piece of malware named Skygofree that is highly-advanced and can be used to spy on the users and their message-related apps (Messenger, WhatsApp, Viber, etc.) using a number of different methods. Here are some of the more notable capabilities of this espionage tool: Record audio from the device and ...
-
web:securelist.com
At the beginning of October 2017, we discovered new Android spyware with several features previously unseen in the wild. In the course of further research, we found a number of related samples that point to a long-term development process. We believe the initial versions of this malware were created at least three years ago.
-
web:serviceteamit.com
News Potent Skygofree Malware Packs 'Never-Before-Seen' Features Researchers have identified a powerful new Android malware strain called Skygofree capable of eavesdropping on WhatsApp messages, siphoning private data off phones and allowing adversaries to open reverse shell modules on targeted devices, giving attackers ultimate remote control.
-
web:westoahu.hawaii.edu
The method in which Skygofree is distributed is through fake mobile operator websites, where Skygofree is disguised as an update to improve mobile internet speed. Once downloaded it conceals itself from the user only displaying a "setup is in progress" notification while it waits for further instructions from the command server.
-
web:www.kaspersky.com
The malware is distributed through fake mobile operator websites, where Skygofree is disguised as an update to improve mobile Internet speed. If a user swallows the bait and downloads the Trojan, it displays a notification that setup is supposedly in progress, conceals itself from the user, and requests further instructions from the command server.
-
web:www.manageengine.com
New spyware, Skygofree , threatens Android users' privacy While Meltdown and Spectre are still causing chaos among IT departments, security researchers have discovered a new strain of malware for mobile devices. Named Skygofree , this new Android malware can spy on users by recording their audio, monitoring popular communication apps, and more.
-
web:www.microsoft.com
Understand how this virus or malware spreads and how its payloads affects your computer. Protect against this threat, identify symptoms, and clean up or remove infections.
-
web:www.techrepublic.com
The Skygofree Android malware can capture video and photos, record audio, and monitor an infected device once it reaches a specified GPS coordinate, says TechRepublic's Brandon Vigliarolo.
-
web:www.techtarget.com
A new malware program called the Skygofree Trojan was discovered targeting Android smartphones and tablets with extensive spyware capabilities in order to gain access to user information and gather data from apps. How does this Trojan work and what makes it unique compared to other types of spyware?
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.