SYMBOLCOMMON_NAMEaka. SYNONYMS
apk.phantomlance (Back to overview)

PhantomLance

aka: PWNDROID1

Actor(s): APT32

There is no description at this point.

References
2020-09-03 ⋅ Kaspersky Labs ⋅ David Emm
@online{emm:20200903:it:99f6d5f, author = {David Emm}, title = {{IT threat evolution Q2 2020}}, date = {2020-09-03}, organization = {Kaspersky Labs}, url = {https://securelist.com/it-threat-evolution-q2-2020/98230}, language = {English}, urldate = {2022-08-28} } IT threat evolution Q2 2020
PhantomLance Aria-body COMpfun Vicious Panda
2020-07-29 ⋅ Kaspersky Labs ⋅ GReAT
@online{great:20200729:trends:6810325, author = {GReAT}, title = {{APT trends report Q2 2020}}, date = {2020-07-29}, organization = {Kaspersky Labs}, url = {https://securelist.com/apt-trends-report-q2-2020/97937/}, language = {English}, urldate = {2020-07-30} } APT trends report Q2 2020
PhantomLance Dacls Penquin Turla elf.wellmess AppleJeus Dacls AcidBox Cobalt Strike Dacls EternalPetya Godlike12 Olympic Destroyer PlugX shadowhammer ShadowPad Sinowal VHD Ransomware Volgmer WellMess X-Agent XTunnel
2020-04-29 ⋅ Twitter (@h4ckak) ⋅ Ring4sky
@online{ring4sky:20200429:more:4e5b758, author = {Ring4sky}, title = {{More IOCs related to PhantomLance}}, date = {2020-04-29}, organization = {Twitter (@h4ckak)}, url = {https://drive.google.com/file/d/1m0Qg8e1Len1My6ssDy6F0oQ7JdkJUkuu/view}, language = {English}, urldate = {2020-05-19} } More IOCs related to PhantomLance
PhantomLance
2020-04-28 ⋅ Kaspersky Labs ⋅ Alexey Firsh, Lev Pikman
@online{firsh:20200428:hiding:97cbb7b, author = {Alexey Firsh and Lev Pikman}, title = {{Hiding in plain sight: PhantomLance walks into a market}}, date = {2020-04-28}, organization = {Kaspersky Labs}, url = {https://securelist.com/apt-phantomlance/96772/}, language = {English}, urldate = {2020-05-05} } Hiding in plain sight: PhantomLance walks into a market
PhantomLance
2019-10-23 ⋅ Cylance ⋅ Blackberry Research
@techreport{research:20191023:mobile:b5cb828, author = {Blackberry Research}, title = {{Mobile Malware and APT Espionage: Prolific, Pervasive, and Cross-Platform}}, date = {2019-10-23}, institution = {Cylance}, url = {https://www.blackberry.com/us/en/pdfviewer?file=/content/dam/blackberry-com/asset/enterprise/pdf/direct/mobile-malware-report.pdf}, language = {English}, urldate = {2020-08-10} } Mobile Malware and APT Espionage: Prolific, Pervasive, and Cross-Platform
PhantomLance

There is no Yara-Signature yet.