SYMBOLCOMMON_NAMEaka. SYNONYMS
apk.gplayed (Back to overview)

GPlayed


Cisco Talos identifies GPlayed as a malware written in .NET using the Xamarin environment for mobile applications. It is considered powerful because of its capability to adapt after its deployment. In order to achieve this adaptability, the operator has the capability to remotely load plugins, inject scripts and even compile new .NET code that can be executed.

References
2018-10-29Cisco TalosVitor Ventura
@online{ventura:20181029:gplayeds:4dc1df5, author = {Vitor Ventura}, title = {{GPlayed's younger brother is a banker — and it's after Russian banks}}, date = {2018-10-29}, organization = {Cisco Talos}, url = {https://blog.talosintelligence.com/2018/10/gplayerbanker.html}, language = {English}, urldate = {2019-08-05} } GPlayed's younger brother is a banker — and it's after Russian banks
GPlayed
2018-10-11Cisco TalosVitor Ventura
@online{ventura:20181011:gplayed:fa3d5c3, author = {Vitor Ventura}, title = {{GPlayed Trojan - .Net playing with Google Market}}, date = {2018-10-11}, organization = {Cisco Talos}, url = {https://blog.talosintelligence.com/2018/10/gplayedtrojan.html}, language = {English}, urldate = {2019-10-13} } GPlayed Trojan - .Net playing with Google Market
GPlayed

There is no Yara-Signature yet.