SYMBOLCOMMON_NAMEaka. SYNONYMS
apk.medusa (Back to overview)

Medusa

aka: Gorgona

According to ThreatFabric, this is an Android banking trojan under active development as of July 2020. It is using TCP for C&C communication and targets Turkish banks.

References
2022-02-07 ⋅ ThreatFabric ⋅ ThreatFabric
@online{threatfabric:20220207:medusa:285634c, author = {ThreatFabric}, title = {{Medusa: a marriage partner as gunslinger}}, date = {2022-02-07}, organization = {ThreatFabric}, url = {https://www.threatfabric.com/blogs/partners-in-crime-medusa-cabassous.html}, language = {English}, urldate = {2022-02-09} } Medusa: a marriage partner as gunslinger
FluBot Medusa
2021-04-28 ⋅ ThreatFabric ⋅ ThreatFabric
@online{threatfabric:20210428:rage:2ee0e0b, author = {ThreatFabric}, title = {{The Rage of Android Banking Trojans}}, date = {2021-04-28}, organization = {ThreatFabric}, url = {https://www.threatfabric.com/blogs/the-rage-of-android-banking-trojans.html}, language = {English}, urldate = {2021-05-04} } The Rage of Android Banking Trojans
Anubis Gustuff Medusa
2020-07-20 ⋅ ThreatFabric ⋅ Twitter (@ThreatFabric)
@online{threatfabric:20200720:medusa:2748a14, author = {Twitter (@ThreatFabric)}, title = {{Tweet on Medusa - A new Android banking Trojan}}, date = {2020-07-20}, organization = {ThreatFabric}, url = {https://twitter.com/ThreatFabric/status/1285144962695340032}, language = {English}, urldate = {2020-07-22} } Tweet on Medusa - A new Android banking Trojan
Medusa

There is no Yara-Signature yet.