TF-MAL-apk.chamois
📛 Threat Title
Malware family: Chamois
Description
ThreatFox malware family `apk.chamois`. Printable name: Chamois.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
domain
apk.chamois
VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.chamois
IOC database
- Type
- domain
- Value
apk.chamois- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Extracted from Threat TF-MAL-apk.chamois
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.chamois
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (10)
-
web:cybernews.com
The FBI warns of a surge in ATM jackpotting attacks, with more than 700 incidents in 2025 alone. Hackers use Ploutus malware to force machines to dispense cash.
-
web:eagleeyet.net
In March 2017 the Android security team had detected analysed and eliminated a sophisticated botnet which was built on compromised apps that work together to power ad and SMS fraud. Dubbed as Chamois , this malware family had originally cropped up in 2016 and was distributed through Google Play and 3rd party app stores.
-
web:malpedia.caad.fkie.fraunhofer.de
Details for the Chamois malware family including references, samples and yara signatures.
-
web:techyorker.com
Intel Lenovo hardware flaw persisted for 5 years and won't ever be fully fixed—learn what to update and how to reduce risk now.
-
web:www.breachsense.com
Complete malware remediation now requires addressing both the infected endpoint and the stolen authentication data. Your malware incident response playbook must account for both.
-
web:www.cisa.gov
It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.
-
web:www.crowdstrike.com
Remediate faster Execute built-in commands or custom scripts to easily carry out complex remediation actions on any managed endpoint remotely. Connect to and quickly isolate the impacted endpoint, then remove malicious files to immediately shut down the attack.
-
web:www.enigmasoftware.com
Cyber security engineers from Google Security team have discovered and taken down a huge family of Potentially Harmful Applications (PHAs) named Chamois . The researchers detected the malicious applications while doing a routine check-up in the course of the ad traffic evaluation. Verify Apps had an immense role in discovering and destroying Chamois as these applications do not appear in the ...
-
web:www.ncsc.gov.uk
This guidance helps private and public sector organisations deal with the effects of malware (which includes ransomware). It provides actions to help organisations prevent a malware infection, and also steps to take if you're already infected. Following this guidance will reduce: the likelihood of becoming infected the spread of malware throughout your organisation the impact of the infection
-
web:www.techmonitor.ai
When Google's security team identified what they dubbed the " Chamois " malware family in 2017, they noted its unusual complexity and sophistication. First spotted during a routine advertising traffic quality evaluation, the ad fraud malware was distributed through a range of channels, and had quietly become one of the largest and most multifaceted malicious apps seen on Android to date ...
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.