TF-MAL-apk.sturnus
📛 Threat Title
Malware family: Sturnus
Description
ThreatFox malware family `apk.sturnus`. Printable name: Sturnus.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
domain
apk.sturnus
VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.sturnus
IOC database
- Type
- domain
- Value
apk.sturnus- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Extracted from Threat TF-MAL-apk.sturnus
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.sturnus
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (10)
-
web:belaaz.com
Users are also urged to treat unusual login screens as warning signs, avoid clicking unexpected links or attachments, and consider personal data removal services to limit exposure from leaked or brokered information. Despite being a relatively new malware family , Sturnus already stands out for its depth of control and stealth.
-
web:cyberpress.org
A newly discovered Android banking trojan named Sturnus has drawn attention from security researchers for its advanced data theft and remote control capabilities. Identified by MTI Security, this privately operated malware can seize complete control of infected devices, steal banking credentials, and even bypass encrypted messaging by capturing decrypted content. The threat is believed to be ...
-
web:cybersecuritynews.com
A new banking malware called Sturnus has emerged as a significant threat to mobile users across Europe. Security researchers have discovered that this sophisticated Android trojan can capture encrypted messages from popular messaging apps like WhatsApp, Telegram, and Signal by accessing content directly from the device screen after decryption. The malware's ability to monitor these ...
-
web:malpedia.caad.fkie.fraunhofer.de
According to ThreatFabric, Sturnus is a privately operated Android banking trojan. This malware supports a broad range of fraud-related capabilities, including full device takeover. A key differentiator is its ability to bypass encrypted messaging. By capturing content directly from the device screen after decryption, Sturnus can monitor communications via WhatsApp, Telegram, and Signal. The ...
-
web:news.csraid.com
These measures ensure that the malware remains active even after device reboots or attempted removal by users. Mitigation Strategies and Recommendations Security professionals recommend several defensive measures against Sturnus and similar advanced mobile threats.
-
web:thehackernews.com
Android banking trojan Sturnus enables screen-decrypted chat capture, device takeover, and targeted European financial fraud.
-
web:www.bleepingcomputer.com
A new Android banking trojan named Sturnus can capture communication from end-to-end encrypted messaging platforms like Signal, WhatsApp, and Telegram, as well as take complete control of the device.
-
web:www.pcrisk.com
What kind of malware is Sturnus ? Sturnus is an Android malware (a banking Trojan) that can control a device. It is capable of reading chat messages, stealing banking details by showing fake login pages, and more. Attackers can remotely perform malicious actions in the background while keeping the screen hidden from the victim. Sturnus in detail Sturnus is still being tested, but it is already ...
-
web:www.protoslabs.io
Sturnus is a dangerous Android banking trojan using VNC remote control and Accessibility abuse for real-time fraud. Get urgent IOCs and mitigation steps now.
-
web:www.threatfabric.com
MTI Security researchers have identified Sturnus , a privately operated Android banking trojan. This malware supports a broad range of fraud-related capabilities, including full device takeover. A key differentiator is its ability to bypass encrypted messaging. By capturing content directly from the device screen after decryption, Sturnus can monitor communications via WhatsApp, Telegram, and ...
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.