SYMBOLCOMMON_NAMEaka. SYNONYMS
apk.sharkbot (Back to overview)

SharkBot

SharkBot is a piece of malicious software targeting Android Operating Systems (OSes). It is designed to obtain and misuse financial data by redirecting and stealthily initiating money transfers. SharkBot is particularly active in Europe (United Kingdom, Italy, etc.), but its activity has also been detected in the United States.

References
2023-07-29 ⋅ Google ⋅ Google Cybersecurity Action Team
@techreport{team:20230729:threat:11709ae, author = {Google Cybersecurity Action Team}, title = {{Threat Horizons August 2023 Threat Horizons Report}}, date = {2023-07-29}, institution = {Google}, url = {https://services.google.com/fh/files/blogs/gcat_threathorizons_full_jul2023.pdf}, language = {English}, urldate = {2023-08-03} } Threat Horizons August 2023 Threat Horizons Report
SharkBot Cobalt Strike
2022-10-28 ⋅ ThreatFabric ⋅ ThreatFabric
@online{threatfabric:20221028:malware:8924da5, author = {ThreatFabric}, title = {{Malware wars: the attack of the droppers}}, date = {2022-10-28}, organization = {ThreatFabric}, url = {https://www.threatfabric.com/blogs/the-attack-of-the-droppers.html}, language = {English}, urldate = {2022-10-30} } Malware wars: the attack of the droppers
Brunhilda SharkBot Vultur
2022-09-06 ⋅ Github (muha2xmad) ⋅ Muhammad Hasan Ali
@online{ali:20220906:technical:8bcc916, author = {Muhammad Hasan Ali}, title = {{Technical analysis of SharkBot android malware}}, date = {2022-09-06}, organization = {Github (muha2xmad)}, url = {https://muha2xmad.github.io/malware-analysis/sharkbot/}, language = {English}, urldate = {2022-09-07} } Technical analysis of SharkBot android malware
SharkBot
2022-09-02 ⋅ nccgroup ⋅ Alberto Segura, Mike Stokkel
@online{segura:20220902:sharkbot:a9ce98d, author = {Alberto Segura and Mike Stokkel}, title = {{Sharkbot is back in Google Play}}, date = {2022-09-02}, organization = {nccgroup}, url = {https://blog.fox-it.com/2022/09/02/sharkbot-is-back-in-google-play/}, language = {English}, urldate = {2022-09-12} } Sharkbot is back in Google Play
SharkBot
2022-06-04 ⋅ bin.re ⋅ Johannes Bader
@online{bader:20220604:domain:5dd1e0a, author = {Johannes Bader}, title = {{The Domain Generation Algorithms of SharkBot}}, date = {2022-06-04}, organization = {bin.re}, url = {https://bin.re/blog/the-dgas-of-sharkbot/}, language = {English}, urldate = {2023-04-14} } The Domain Generation Algorithms of SharkBot
SharkBot
2022-04-07 ⋅ Checkpoint ⋅ Alex Shamshur, Raman Ladutska
@online{shamshur:20220407:google:fbc0f89, author = {Alex Shamshur and Raman Ladutska}, title = {{Google is on guard: sharks shall not pass!}}, date = {2022-04-07}, organization = {Checkpoint}, url = {https://research.checkpoint.com/2022/google-is-on-guard-sharks-shall-not-pass/}, language = {English}, urldate = {2022-04-08} } Google is on guard: sharks shall not pass!
SharkBot
2022-03-03 ⋅ NCC Group ⋅ RIFT: Research and Intelligence Fusion Team
@online{team:20220303:sharkbot:da02f61, author = {RIFT: Research and Intelligence Fusion Team}, title = {{SharkBot: a “new” generation Android banking Trojan being distributed on Google Play Store}}, date = {2022-03-03}, organization = {NCC Group}, url = {https://research.nccgroup.com/2022/03/03/sharkbot-a-new-generation-android-banking-trojan-being-distributed-on-google-play-store/}, language = {English}, urldate = {2022-03-04} } SharkBot: a “new” generation Android banking Trojan being distributed on Google Play Store
SharkBot
2022-03-03 ⋅ Fox-IT ⋅ Alberto Segura, Rolf Govers
@online{segura:20220303:sharkbot:58ba7e0, author = {Alberto Segura and Rolf Govers}, title = {{SharkBot: a “new” generation Android banking Trojan being distributed on Google Play Store}}, date = {2022-03-03}, organization = {Fox-IT}, url = {https://blog.fox-it.com/2022/03/03/sharkbot-a-new-generation-android-banking-trojan-being-distributed-on-google-play-store/}, language = {English}, urldate = {2022-03-04} } SharkBot: a “new” generation Android banking Trojan being distributed on Google Play Store
SharkBot
2021-11-11 ⋅ Cleafy ⋅ Cleafy
@online{cleafy:20211111:sharkbot:efbc5a5, author = {Cleafy}, title = {{SharkBot: a new generation of Android Trojans is targeting banks in Europe}}, date = {2021-11-11}, organization = {Cleafy}, url = {https://www.cleafy.com/cleafy-labs/sharkbot-a-new-generation-of-android-trojan-is-targeting-banks-in-europe}, language = {English}, urldate = {2021-11-17} } SharkBot: a new generation of Android Trojans is targeting banks in Europe
SharkBot

There is no Yara-Signature yet.