s2
--:--:--UTC

Searching APEX

Starting…

  1. Searching Threats, IOCs & Threat Intelligence locally
  2. Querying external providers
  3. Asking AI Forensic Validator
  4. Creating new entry from validated hit

0s elapsed

TF-MAL-apk.oscorp

📛 Threat Title

Malware family: Oscorp

Category: Oscorp First seen: Last updated: Source: ThreatFox Malwares

Description

ThreatFox malware family `apk.oscorp`. Printable name: Oscorp. Aliases: UBEL.

Indicators of Compromise (1)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

domain apk.oscorp VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.oscorp

IOC database

Type
domain
Value
apk.oscorp
First seen
Last seen
Attached to this threat
Appears in
1 threat
Description
Extracted from Threat TF-MAL-apk.oscorp

Open the full IOC page →

Threat Hunt — feed corroboration

Not present in any configured threat-intel feed.

Details From VirusTotal

VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.oscorp

References (1)

Remediations (9)

  • web:cyble.com

    A Variant Of OSCORP Masquerades As Flash Player App Targeting Global Users Malicious app shares code and encrypted strings with the UBEL Android botnet, developed to attack global banking organizations. During a recent threat hunt, Cyble Research Labs identified a malware sample from MalwareBazaar.

  • web:windowsforum.com

    The emergence of RESURGE signals more than just another entry in a long line of malware threats. According to CISA, RESURGE contains advanced persistence features inherited from the SPAWNCHIMERA malware family—a group notorious for its ability to survive system reboots and avoid simplistic remediation .

  • web:www.acronis.com

    Acronis TRU identified new variants of Chaos RAT, a known malware family , in recent real-world Linux and Windows attacks. Chaos RAT is an open-source remote administration tool (RAT) first seen in 2022. It evolved in 2024, and new samples have been discovered by TRU in 2025. TRU researchers uncovered a critical vulnerability in Chaos RAT's web panel that allows attackers to execute remote ...

  • web:www.cisa.gov

    It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.

  • web:www.cleafy.com

    The Android malware Oscorp keeps evolving. UBEL was born, a new advanced threat targeting banks across the globe: here is the full technical report

  • web:www.enigmasoftware.com

    A new Android malware named the Oscop was detected by the Italian security firm AddressIntel. The threat relies on users granting it access to the Android Accessibility Service under the pretense of it being for 'Personal protection.' If, at first, the user declines the prompt, the Oscop will continue to reopen the Settings menu every 8 seconds until it receives the requested permissions. If ...

  • web:www.ncsc.gov.uk

    How to defend organisations against malware or ransomware attacks.

  • web:www.pcrisk.com

    What is Oscorp ? Oscorp is malware targeting devices that use the Android operating system. It has various malicious functionality. Oscorp's capabilities include data extraction, sending text messages, making telephone calls, spying, removing anti-virus tools, etc. Due to its many dangerous features, Oscorp is classified as a highly dangerous piece of software. Therefore, it must be removed ...

  • web:www.sec.gov

    Cryptocurrency exchanges may stop operating or permanently shut down due to fraud, technical glitches, hackers or malware , which may also affect the price of cryptocurrencies and thus the Fund's investments in cryptocurrency-related instruments or in publicly traded securities of companies engaged in cryptocurrency-related businesses and ...

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.