TF-MAL-apk.tempting_cedar

Description

ThreatFox malware family `apk.tempting_cedar`. Printable name: TemptingCedar Spyware.

Indicators of Compromise (0)

No indicators of compromise on this threat.

References (1)

• ThreatFox: IOCs for this family ThreatFox Malwares

• Tempting Cedar Spyware - Threat Group Cards: A Threat Actor Encyclopedia
  web:apt.etda.or.th

  Home > List all groups > List all tools > List all groups using tool Tempting Cedar Spyware

  2026-05-23 22:23 UTC
• Avast tracks down Tempting Cedar Spyware
  web:blog.avast.com

  The cybercriminals behind the Tempting Cedar Spyware were able to install a persistent piece of spyware by exploiting social media, like Facebook, and people's lack of security awareness, and were thus able to gather sensitive and private data from their victims' phones including real-time location data which makes the malware exceptionally ...

  2026-05-23 22:23 UTC
• Malware: How To Protect Against, Detect, and Remove It
  web:consumer.ftc.gov

  Malware is one of the biggest threats to the security of your computer, tablet, phone, and other devices. Learn how to protect yourself, how to tell if your device has malware , and how to remove it.

  2026-05-23 22:23 UTC
• TemptingCedar Spyware (Malware Family)
  web:malpedia.caad.fkie.fraunhofer.de

  Tempting cedar spyware is an Android spyware campaign, active since at least 2015, that used social engineering via fake, attractive Facebook profiles to trick victims into downloading malware . The spyware was designed to steal a wide range of sensitive personal data.

  2026-05-23 22:23 UTC
• Open Hunting - Threat Library
  web:openhunting.io

  Uncovered by researchers at Avast, the operation has been dubbed 'Tempting Cedar Spyware' . The name combines the main means of attack - by tricking victims using fake social media profiles purporting to be those of a young woman - with the Cedar tree, which features prominently on the flag of Lebanon.

  2026-05-23 22:23 UTC
• FINALDRAFT Malware Exploits Microsoft Graph API for Espionage on ...
  web:thehackernews.com

  REF7707 deployed FINALDRAFT malware , using Microsoft Graph API for stealthy command-and-control in a global espionage campaign.

  2026-05-23 22:23 UTC
• ThreatFox | TemptingCedar Spyware
  web:threatfox.abuse.ch

  A malware sample can be associated with only one malware family . The page below gives you an overview on indicators of compromise associated with apk. tempting_cedar .

  2026-05-23 22:23 UTC
• Malware Incident Response: The 7-Step Playbook for 2025 - Breachsense
  web:www.breachsense.com

  Complete malware remediation now requires addressing both the infected endpoint and the stolen authentication data. Your malware incident response playbook must account for both.

  2026-05-23 22:23 UTC
• Technical Approaches to Uncovering and Remediating Malicious ... - CISA
  web:www.cisa.gov

  It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.

  2026-05-23 22:23 UTC
• Mitigating malware and ransomware attacks - The National Cyber Security ...
  web:www.ncsc.gov.uk

  How to defend organisations against malware or ransomware attacks.

  2026-05-23 22:23 UTC

Only Available for Registered Users. Sign in to view.