TF-MAL-apk.darkshades
📛 Threat Title
Malware family: Dark Shades
Description
ThreatFox malware family `apk.darkshades`. Printable name: Dark Shades. Aliases: Rogue.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
domain
apk.darkshades
VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.darkshades
IOC database
- Type
- domain
- Value
apk.darkshades- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Extracted from Threat TF-MAL-apk.darkshades
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.darkshades
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (10)
-
web:en.wikipedia.org
Blackshades is a malicious trojan horse used by hackers to control infected computers remotely. The malware targets computers using operating systems based on Microsoft Windows. [2] According to US officials, over 500,000 computer systems have been infected worldwide with the software. [3] In 2014, the United States Federal Bureau of Investigation (FBI) arrested hundreds of people who had ...
-
web:learn.microsoft.com
Remediation actions can include removing a file, sending it to quarantine, or allowing it to remain. This article includes information and links to resources about specifying what actions should be taken when threats are detected on devices. You can choose from several methods, such as: Configure remediation for Microsoft Defender Antivirus ...
-
web:malpedia.caad.fkie.fraunhofer.de
Details for the BlackShades malware family including references, samples and yara signatures.
-
web:publicintelligence.net
In this manner, when the malware calls to the established domain, standard DNS protocols will route the malware to the Blackshades user's IP address. (U) The FBI is providing approximately 13,600 domains used by Blackshades users, which have been observed receiving status updates or have participated in previous attacks.
-
web:support.eset.com
For this reason, we highly recommend that you use up-to-date antivirus software that can detect and block this malware . Does ESET protect me from BlackShades? Yes, ESET detects the malware distributed by BlackShades as Win32/Ainslot and blocks it. To ensure the highest level of security, we recommend that you always use the latest detection engine.
-
web:thehackernews.com
Blackshades malware is designed to steal victims' usernames and passwords for email and Web services, instant messaging applications, FTP clients and lots more. In worst cases, the malicious software program even allows hackers to take remote control of users' computer and webcam to take photos or v...
-
web:www.cisa.gov
This joint advisory is the result of a collaborative research effort by the cybersecurity authorities of five nations: Australia, Canada, New Zealand, the United Kingdom, and the United States.1 It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices.
-
web:www.fbi.gov
The U.S. Attorney's Office for the Southern District of New York announced the results of a cyber takedown, of a particularly insidious computer malware known as Blackshades.
-
web:www.justice.gov
Beginning in 2010, the "Blackshades" organization, which YÜCEL owned and controlled, sold and distributed malware to thousands of cybercriminals throughout the world. Blackshades' flagship product was the RAT - a sophisticated piece of malware that enabled cybercriminals secretly and remotely to gain control over a victim's computer.
-
web:www.microsoft.com
Understand how this virus or malware spreads and how its payloads affects your computer. Protect against this threat, identify symptoms, and clean up or remove infections.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.