APKLAB.io (@apklabio) header
APKLAB.io (@apklabio) profile picture

APKLAB.io

@apklabio

https://teapaw.org/t.co/rNQjyTW8J1 is an Intelligence-driven Threat Hunting Platform for the Security Analyst Community by @AvastThreatLabs

ava.st/apklabio
Joined April 2018
  • Tweets147
  • Following21
  • Followers1.6K
39Media
Photo by APKLAB.io (@apklabio)Photo by APKLAB.io (@apklabio)Photo by APKLAB.io (@apklabio)Photo by APKLAB.io (@apklabio)Photo by APKLAB.io (@apklabio)Photo by APKLAB.io (@apklabio)Photo by APKLAB.io (@apklabio)Photo by APKLAB.io (@apklabio)Photo by APKLAB.io (@apklabio)Photo by APKLAB.io (@apklabio)
Hey, fellow mobile malware researchers! During the #COVID19 crisis, lots of actors started to design apps aimed at phishing users into downloading and installing malware. We are therefore making our internal customized telemetry for Covid19 public, here: apklab.io/covid19
Image from APKLAB.io (@apklabio)
2
41
3
74
APKLAB.io retweeted
NI@FI@70 (@ni_fi_70) profile picture
NI@FI@70@ni_fi_7027 Oct 2022
Replying to @LukasStefanko @malwrhunterteam
There are 3 other distribution domains for this Spyware /cbrewardsapply.com /cbrewards.xyz /cbcplus.in THX @apklabio
Image from NI@FI@70 (@ni_fi_70)
3
9
APKLAB.io retweeted
David (@midnight_comms) profile picture
David
@midnight_comms6 Dec 2021
left a few things out -- the additional downloaded APK is: 2971c15d7534dffd37535535d5dba4479355f153 [SHA-1] via haeundaejugong[.]com | GET /data/app.php?type=apk&value=replace & signing cert has been used for multiple apps: 2be2bc2a98e47e1468248f7ddcfd5ca3 [MD5] h/t @apklabio
Image from David (@midnight_comms)
This Post is from an account that no longer exists. Learn more
2
1
1
APKLAB.io retweeted
NI@FI@70 (@ni_fi_70) profile picture
NI@FI@70@ni_fi_7022 Sep 2021
Replying to @CERT_OPL @CSIRT_KNF @CERT_Polska @apkdetect @pmmkowalczyk @PPiekutowski @B0rys_Grishenko
Two more hashes found (thx @apklabio) 174 targedet Banking Apps pastebin.com/HbVMnb1Y
Image from NI@FI@70 (@ni_fi_70)
1
3
4
APKLAB.io retweeted
NI@FI@70 (@ni_fi_70) profile picture
NI@FI@70@ni_fi_709 Sep 2021
Replying to @V3nkat3 @Nethanella @alberto__segura @bl4ckh0l3z @ReBensk @JAMESWT_MHT @James_inthe_box
dd8a5a1a8632d661f152f435b7afba825e474ec0d03d1c5ef8669fdc2b484165 efb92fb17348eb10ba3a93ab004422c30bcf8ae72f302872e9ef3263c47133a7 8a6889610a18296e812fabd0a4ceb8b75caadc5cec1b39e8173c3e0093fd3a57 samples can be downloaded from @apklabio or @koodous_project enjoy it ;-)
Image from NI@FI@70 (@ni_fi_70)
7
1
17
APKLAB.io retweeted
NI@FI@70 (@ni_fi_70) profile picture
NI@FI@70@ni_fi_7017 Aug 2021
Replying to @ReBensk @malwrhunterteam @cryptax @bl4ckh0l3z @JAMESWT_MHT @500mk500
another one play.google.com/store/apps/d… some of the nasty C2s /vip.paramera.shop /grouplearn.shop /weathercycl.club /implemente.life good place to search for is @apklabio
Image from NI@FI@70 (@ni_fi_70)
2
9
Sample: apklab.io/apk.html?hash=5971…
Trezor (@Trezor) profile pictureTrezor
@Trezor18 Jan 2021
Warning to all Trezor owners using Android devices! This app is malicious and has no relation to Trezor or SatoshiLabs. Please, don't install it. Remember that you should never share your seed with anyone until your Trezor device asks you to do it!
Image from Trezor (@Trezor)
3
6
Happy New Year from the APKLab.io Team! What's new? 🎁 Support for Android 11. Now you can select from each binary (.apk) options, in which Android version you want to perform the analysis. @avast_antivirus @AvastThreatLabs
2
3
14
Note: We support only x86 version teapaw.org/tasssadar/status/13471…
APKLAB.io retweeted
NI@FI@70 (@ni_fi_70) profile picture
NI@FI@70@ni_fi_708 Oct 2020
Replying to @101sever99 @LukasStefanko @James_inthe_box @TRCert
thx @apklabio 31 samples found on this domain apklab.io/sampledump.csv?fil… and 149 on corresponding IP apklab.io/sampledump.csv?fil…
Image from NI@FI@70 (@ni_fi_70)
Image from NI@FI@70 (@ni_fi_70)
1
3
Threat Intelligence: iOS and Android "Shocking" scams spreading via TikTok - 7 apps with 2.4M+ downloads. Some feature HiddenAds adware while others charge exorbitant amounts for fake 'Shock your friends' apps. More details here: blog.avast.com/scam-apps-spr… kudos to @JVAvast
2
2
5
IoCs: ThemeZone - Shawky App Free - Shock My Friends: apklab.io/apk.html?hash=782a… Tap Roulette ++Shock my Friend: apklab.io/apk.html?hash=897c…
APKLAB.io retweeted
Re-ind (@ReBensk) profile picture
Re-ind@ReBensk6 Jul 2020
#Android #Banking #Trojan #Malware @apklabio @virqdroid @malwrhunterteam apklab.io is helping to detect more joker Trojans from Google Play:
Image from Re-ind (@ReBensk)
Image from Re-ind (@ReBensk)
Image from Re-ind (@ReBensk)
9
19
Long time no see! #Cerberus banker dropper found again in @GooglePlay. Masks as currency convertor act as currency stealer. Target users in Spain, incl. @GooglePlay geo-restrictions. Hash: apklab.io/apk.html?hash=c30e…
Image from APKLAB.io (@apklabio)
Image from APKLAB.io (@apklabio)
Image from APKLAB.io (@apklabio)
Image from APKLAB.io (@apklabio)
1
4
3
14
more replies
Multiple versions have been uploaded before activation. Uses a native library libcornflakes.so to drop/load the banker. This lib is present in multiple versions of the app, at least since v 1.0.17, removed again in later versions 1.0.24+, became active only recently.
1
Downloads payload from: hxxp://23.106.124.183:2055/get/0c0fa330-0c13-4530-a024-108acf00573e/280b15a8-142d-400e-a1a6-c5004c3c62e1 (still active) Other known C2s: futurepark[.]top, woodenhillz[.]top, greengrime[.]top, quickquake[.]top
"HiddenAds up to no good again and spreading via Android gaming apps" A walkthrough article on discovering HiddenAds samples on @GooglePlay with apklab.io from @JVAvast decoded.avast.io/jakubvavra/…
9
12
APKLAB.io retweeted
Martin Hron (@thinkcz) profile picture
Martin Hron@thinkcz19 Jun 2020
Finally, after some struggling. We present to you a second part of #GPS #trackers mayhem story. Control over vendor business interface: ✅, hiring botnet of #GSM capable devices: ✅, no #security: ✅, brands in disguise: ✅ bit.ly/2APFJd0 @avast_antivirus
1
6
1
17
APKLab.io #COVID19 Telemetry Statistics - 3526 samples - 578 domains Explore the samples here: apklab.io/covid19
Image from APKLAB.io (@apklabio)
Image from APKLAB.io (@apklabio)
3
8
Load more