TF-MAL-apk.pctattletale
📛 Threat Title
Malware family: pcTattletale
Description
ThreatFox malware family `apk.pctattletale`. Printable name: pcTattletale.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
domain
apk.pctattletale
VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.pctattletale
IOC database
- Type
- domain
- Value
apk.pctattletale- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Extracted from Threat TF-MAL-apk.pctattletale
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.pctattletale
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (9)
-
web:cybernoz.com
In 2021, we reported that "employee and child-monitoring" software vendor pcTattleTale hadn't been very careful about securing the screenshots it sneakily took from its victims' phones. A security researcher found an issue while using a trial version of pcTattleTale , noticing that the company uploaded the screenshots to an unsecured online database (meaning anyone could view the ...
-
web:haveibeenpwned.com
In May 2024, the spyware service pcTattletale suffered a data breach that defaced the website and posted tens of gigabytes of data to the homepage, allegedly due to pcTattletale not responding to a previous security vulnerability report. The breach exposed data including membership records, infected PC names, captured messages and extensive logs of IP addresses and device information.
-
web:malpedia.caad.fkie.fraunhofer.de
Once physically planted on a person's phone or computer (usually with knowledge of the victim's passcode or login), the app would continuously upload a copy of the victim's information, including messages, photos, and location data, to pcTattletale's servers and make the data accessible to whoever planted the spyware.
-
web:techcrunch.com
pcTattletale's website was briefly defaced and contained links containing files from the spyware maker's servers, before going offline.
-
web:www.bitdefender.com
A threat actor has breached and defaced the website of pcTattletale spyware application and dumped numerous archives containing source code and databases.
-
web:www.bleepingcomputer.com
A hacker has defaced the website of the pcTattletale spyware application, found on the booking systems of several Wyndham hotels in the United States, and leaked over a dozen archives containing ...
-
web:www.breachsense.com
Complete malware remediation now requires addressing both the infected endpoint and the stolen authentication data. Your malware incident response playbook must account for both.
-
web:www.cybersecurity-review.com
February 24, 2026 Apple may have introduced colored status bar indicators in iOS 14 to alert users when the camera or microphone is active, but experts have warned this does not stop all malware . Spyware developed by Intellexa and Cytrox, dubbed Predator, can operate on compromised iOS devices without showing any camera or microphone indicators.
-
web:www.malwarebytes.com
A security researcher found an issue while using a trial version of pcTattleTale , noticing that the company uploaded the screenshots to an unsecured online database (meaning anyone could view the screenshots as they weren't protected by any form of authentication—such as a user name and password).
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.