SYMBOLCOMMON_NAMEaka. SYNONYMS
apk.joker (Back to overview)

Joker

aka: Bread

Joker is one of the most well-known malware families on Android devices. It manages to take advantage of Google’s official app store with the help of its trail signatures which includes updating the virus’s code, execution process, and payload-retrieval techniques. This malware is capable of stealing users’ personal information including contact details, device data, WAP services, and SMS messages.

References
2025-02-27 ⋅ Hunt.io ⋅ Hunt.io
Uncovering Joker’s C2 Network: How Hunt’s SSL History Exposed Its Infrastructure
Joker
2022-10-12 ⋅ ThreatFabric ⋅ ThreatFabric
TOAD attacks: Vishing combined with Android banking malware now targeting Italian banks
BRATA Copybara Joker
2022-09-21 ⋅ Github (muha2xmad) ⋅ Muhammad Hasan Ali
Technical analysis of Hydra android malware
Hydra Joker
2022-06-30 ⋅ Microsoft ⋅ Microsoft 365 Defender Research Team
Toll fraud malware: How an Android application can drain your wallet
Joker
2022-06-20 ⋅ Medium (Cryptax) ⋅ Axelle Apvrille
Tracking Android/Joker payloads with Medusa, static analysis (and patience)
Joker
2022-03-08 ⋅ Medium (Cryptax) ⋅ Axelle Apvrille
Live reverse engineering of a trojanized medical app — Android/Joker
Joker
2021-09-17 ⋅ K7 Security ⋅ Baran S
Joker
Joker
2021-07-13 ⋅ zimperium ⋅ Richard Melick
Joker Is Still No Laughing Matter
Joker
2021-05-05 ⋅ K7 Security ⋅ Baran S
Joker
Joker
2020-11-09 ⋅ Trend Micro ⋅ Zhengyu Dong
An Old Joker’s New Tricks: Using Github To Hide Its Payload
Joker
2020-07-09 ⋅ Checkpoint ⋅ Aviran Hazum, Bogdan Melnykov, Israel Wernik
New Joker variant hits Google Play with an old trick
Joker
2020-03-26 ⋅ Bitdefender ⋅ Liviu Arsene
Android Apps and Malware Capitalize on Coronavirus
Anubis Joker
2020-01-09 ⋅ Google ⋅ Alec Guertin, Vadim Kotov
PHA Family Highlights: Bread (and Friends)
Joker
2019-09-03 ⋅ Medium CSIS Techblog ⋅ Aleksejs Kuprins
Analysis of Joker — A Spy & Premium Subscription Bot on GooglePlay
Joker

There is no Yara-Signature yet.