TF-MAL-apk.daam
📛 Threat Title
Malware family: DAAM
Description
ThreatFox malware family `apk.daam`. Printable name: DAAM. Aliases: BouldSpy.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
domain
apk.daam
VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.daam
IOC database
- Type
- domain
- Value
apk.daam- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Extracted from Threat TF-MAL-apk.daam
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.daam
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (10)
-
web:cybersecuritynews.com
Microsoft has released urgent security updates to address a zero-day vulnerability in the Windows Cloud Files Mini Filter Driver (cldflt.sys) that is currently being exploited in the wild.
-
web:hunt.io
Daam is a dangerous Android malware designed to compromise user privacy. It hides inside legitimate applications and steals sensitive data by spying on the clipboard, logging keystrokes, and even taking control of the device. It's particularly known for targeting cryptocurrency wallets, manipulating transactions, and collecting personal information. The stealthy nature of Daam makes it a ...
-
web:malpedia.caad.fkie.fraunhofer.de
According to PCrisk, DAAM is an Android malware utilized to gain unauthorized access to targeted devices since 2021. With the DAAM Android botnet, threat actors can bind harmful code with a genuine application using its APK binding service. Lookout refers to this malware as BouldSpy and assesses with medium confidence that this Android surveillance tool is used by the Law Enforcement Command ...
-
web:tacsecurity.com
In this blog, we will explore how ESOF could have helped mitigate the risks posed by 'Daam' and enhance overall cybersecurity measures. Daam malware is a potent Android threat that infiltrates devices through third-party websites or apps downloaded from untrusted sources.
-
web:windowsforum.com
The emergence of RESURGE signals more than just another entry in a long line of malware threats. According to CISA, RESURGE contains advanced persistence features inherited from the SPAWNCHIMERA malware family—a group notorious for its ability to survive system reboots and avoid simplistic remediation .
-
web:www.breachsense.com
Complete malware remediation now requires addressing both the infected endpoint and the stolen authentication data. Your malware incident response playbook must account for both.
-
web:www.cisa.gov
It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.
-
web:www.computersecurityinfo.com
Daam Is A Family Of Android Malware That Primarily Targets Devices By Abusing System Permissions And Weak Security Configurations. Unlike Simple Malicious Apps That Focus On A Single Action, Daam Operates As A Long-term Infection. After Installation, It Establishes Persistence And Waits For Instructions From Its Operators. These Instructions Can Vary Depending On The Attacker's Goals, Making ...
-
web:www.fbi.gov
Threat actors exploit physical and software vulnerabilities in ATMs and deploy malware to dispense cash without a legitimate transaction. The FBI has observed an increase in ATM jackpotting ...
-
web:www.ncsc.gov.uk
How to defend organisations against malware or ransomware attacks.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.