TF-MAL-apk.fastspy
📛 Threat Title
Malware family: FastSpy
Description
ThreatFox malware family `apk.fastspy`. Printable name: FastSpy.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
domain
apk.fastspy
VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.fastspy
IOC database
- Type
- domain
- Value
apk.fastspy- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Extracted from Threat TF-MAL-apk.fastspy
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.fastspy
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (10)
-
web:cybernews.com
The FBI warns of a surge in ATM jackpotting attacks, with more than 700 incidents in 2025 alone. Hackers use Ploutus malware to force machines to dispense cash.
-
web:cybersecuritynews.com
Two sophisticated Linux rootkits are posing increasingly serious threats to network security by exploiting eBPF technology to hide their presence from traditional detection systems. BPFDoor and Symbiote, both originating from 2021, represent a dangerous class of malware that combines advanced kernel-level access with powerful evasion capabilities.
-
web:d2sy3u3jhkp5ip.cloudfront.net
All three malware packages are linked to a threat actor operating out of North Korea and known by the handle "Kimsuky group". The three new malware variants are named FastFire, FastSpy and FastViewer. All three were found targeting devices that can run Android.
-
web:infocon.org
Conclusion Unlike in the past, the newly identified FastViewer malware receives commands directly from the server without downloading additional malware ( FastSpy ).
-
web:malpedia.caad.fkie.fraunhofer.de
Details for the FastSpy malware family including references, samples and yara signatures.
-
web:malware.news
Introduction In October 2022, we identified malware disguised as a "Hancom Office Viewer" and linked it to the North Korean-based threat group Kimsuky. The malware was named FastViewer by S2W, and the additional mobile RAT downloaded was named FastSpy .
-
web:medium.com
The malware was named FastViewer by S2W, and the additional mobile RAT downloaded was named FastSpy . In the past, the FastViewer malware only executed malicious behavior when a specially created ...
-
web:rewterz.com
In October 2022, Kimsuky was observed using mobile malware to target Android devices. Researchers gave the malicious APKs the names FastFire, FastViewer, and FastSpy by including the word Fast in the package name and describing each one's characteristics.
-
web:www.fbi.gov
Threat actors exploit physical and software vulnerabilities in ATMs and deploy malware to dispense cash without a legitimate transaction. The FBI has observed an increase in ATM jackpotting ...
-
web:www.linkedin.com
Take a closer look at S2W TALON's analysis of the malware tactics of the North Korean APT group puNK-003. Stay up to date and stay secure!🔍 #CyberSecurity #ThreatIntelligence #APT #MalwareAnalysis
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.