TF-MAL-apk.blackrock
📛 Threat Title
Malware family: BlackRock
Description
ThreatFox malware family `apk.blackrock`. Printable name: BlackRock.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
domain
apk.blackrock
VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.blackrock
IOC database
- Type
- domain
- Value
apk.blackrock- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Extracted from Threat TF-MAL-apk.blackrock
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.blackrock
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (9)
-
web:bazaar.abuse.ch
A malware sample can be associated with only one malware family . The page below gives you an overview on malware samples that MalwareBazaar has identified as BlackRock .
-
web:github.com
Predecitive malware analysis Around May 2020 ThreatFabric analysts have uncovered a new strain of banking malware dubbed BlackRock that looked pretty familiar. After investigation, it became clear that this newcomer is derived from the code of the Xerxes banking malware , which itself is a strain of the LokiBot Android banking Trojan.
-
web:learn.microsoft.com
Remediate security weaknesses discovered through security recommendations, and create exceptions if needed, in Defender Vulnerability Management.
-
web:malwaretips.com
This malware removal guide may appear overwhelming due to the number of steps and numerous programs that are being used. We have only written it this way to provide clear, detailed, and easy-to-understand instructions that anyone can use to remove malware for free. Please perform all the steps in the correct order.
-
web:swisscyberinstitute.com
In this article, Swiss Cyber Forum investigates the BlackRock data breach, and provides several key takeaways and recommentaions to keep your company safe
-
web:www.breachsense.com
Complete malware remediation now requires addressing both the infected endpoint and the stolen authentication data. Your malware incident response playbook must account for both.
-
web:www.cisa.gov
It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.
-
web:www.pcrisk.com
What is BlackRock ransomware? While investigating new submissions to VirusTotal, our researchers discovered the BlackRock ransomware. It is designed to encrypt data and demand ransoms for its decryption. This malicious program is part of the Phobos ransomware family . On our testing machine, BlackRock encrypted files and modified their filenames.
-
web:www.threatfabric.com
It therefore seems that the actors behind BlackRock are trying to abuse the grow in online socializing that increased rapidly in the last months due to the pandemic situation. The LokiBot malware family As BlackRock is based on the Xerxes banking Trojan, it is part of the LokiBot descendance which has several variants, as shown hereafter.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.