TF-MAL-apk.fluhorse
📛 Threat Title
Malware family: FluHorse
Description
ThreatFox malware family `apk.fluhorse`. Printable name: FluHorse.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
domain
apk.fluhorse
VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.fluhorse
IOC database
- Type
- domain
- Value
apk.fluhorse- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Extracted from Threat TF-MAL-apk.fluhorse
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.fluhorse
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (10)
-
web:cybersecuritynews.com
Two sophisticated Linux rootkits are posing increasingly serious threats to network security by exploiting eBPF technology to hide their presence from traditional detection systems. BPFDoor and Symbiote, both originating from 2021, represent a dangerous class of malware that combines advanced kernel-level access with powerful evasion capabilities.
-
web:malpedia.caad.fkie.fraunhofer.de
FluHorse targets different sectors of Eastern Asian markets and is distributed via emails. In some cases, the emails used in the first stage of the attacks belong to high-profile entities. The malware can remain undetected for months making it a persistent, dangerous, and hard-to-spot threat.
-
web:malware.news
FluHorse targets different sectors of Eastern Asian markets and is distributed via emails. In some cases, the emails used in the first stage of the attacks belong to high-profile entities. The malware can remain undetected for months making it a persistent, dangerous, and hard-to-spot threat.
-
web:research.checkpoint.com
Research by: Alex Shamshur, Sam Handelman, Raman Ladutska, Ohad Mana Introduction In the latest research conducted by Check Point Research, we describe a newly discovered malware called FluHorse . The malware features several malicious Android applications that mimic legitimate applications, most of which have more than 1,000,000 installs. These malicious apps steal the victims' credentials ...
-
web:secoperations.wordpress.com
Cybersecurity researchers have shared the inner workings of an Android malware family called Fluhorse . The malware "represents a significant shift as it incorporates the malicious components directly within the Flutter code," Fortinet FortiGuard Labs researcher Axelle Apvrille said in a report published last week. Fluhorse was first documented by Check Point in early May 2023,…
-
web:thehackernews.com
Cybersecurity researchers have shared the inner workings of an Android malware family called Fluhorse . The malware "represents a significant shift as it incorporates the malicious components directly within the Flutter code," Fortinet FortiGuard Labs researcher Axelle Apvrille said in a report ...
-
web:www.botconf.eu
The FluHorse malware features several malicious Android applications that mimic legitimate applications each with more than 100,000 installs. These malicious apps steal the victims' credentials and Two-Factor Authentication (2FA) codes. FluHorse targets different sectors of Eastern Asian markets and is distributed via emails.
-
web:www.fortiguard.com
In mid-2023, the Android Fluhorse family pushed the concept further and implemented the malicious payload on the Flutter side. Given the limited support for Flutter by disassemblers and other reverse engineering tools, this makes the tasks for malware analysts more difficult, and we probably need to get prepared for more.
-
web:www.fortinet.com
Android/ Fluhorse is a recently discovered malware family that emerged in May 2023. What sets this malware apart is its utilization of Flutter, an open-source SDK (software development kit) renowned among developers for its ability to build applications compatible with Android, iOS, Linux, and Windows platforms using a single codebase.
-
web:www.virusbulletin.com
In mid-2023, the Android Fluhorse family pushed the concept further and implemented the malicious payload on the Flutter side. Given the limited support for Flutter by disassemblers and other reverse engineering tools, this makes the tasks harder for malware analysts, and we probably need to get prepared for more. Note that disassembling Flutter applications is special (and difficult) for many ...
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.