SYMBOLCOMMON_NAMEaka. SYNONYMS
apk.sharkbot (Back to overview)

SharkBot


SharkBot is a piece of malicious software targeting Android Operating Systems (OSes). It is designed to obtain and misuse financial data by redirecting and stealthily initiating money transfers. SharkBot is particularly active in Europe (United Kingdom, Italy, etc.), but its activity has also been detected in the United States.

References
2022-10-28ThreatFabricThreatFabric
@online{threatfabric:20221028:malware:8924da5, author = {ThreatFabric}, title = {{Malware wars: the attack of the droppers}}, date = {2022-10-28}, organization = {ThreatFabric}, url = {https://www.threatfabric.com/blogs/the-attack-of-the-droppers.html}, language = {English}, urldate = {2022-10-30} } Malware wars: the attack of the droppers
Brunhilda SharkBot Vultur
2022-09-06Github (muha2xmad)Muhammad Hasan Ali
@online{ali:20220906:technical:8bcc916, author = {Muhammad Hasan Ali}, title = {{Technical analysis of SharkBot android malware}}, date = {2022-09-06}, organization = {Github (muha2xmad)}, url = {https://muha2xmad.github.io/malware-analysis/sharkbot/}, language = {English}, urldate = {2022-09-07} } Technical analysis of SharkBot android malware
SharkBot
2022-09-02nccgroupAlberto Segura, Mike Stokkel
@online{segura:20220902:sharkbot:a9ce98d, author = {Alberto Segura and Mike Stokkel}, title = {{Sharkbot is back in Google Play}}, date = {2022-09-02}, organization = {nccgroup}, url = {https://blog.fox-it.com/2022/09/02/sharkbot-is-back-in-google-play/}, language = {English}, urldate = {2022-09-12} } Sharkbot is back in Google Play
SharkBot
2022-06-04bin.reJohannes Bader
@online{bader:20220604:domain:5dd1e0a, author = {Johannes Bader}, title = {{The Domain Generation Algorithms of SharkBot}}, date = {2022-06-04}, organization = {bin.re}, url = {https://bin.re/blog/the-dgas-of-sharkbot/}, language = {English}, urldate = {2023-04-14} } The Domain Generation Algorithms of SharkBot
SharkBot
2022-04-07CheckpointAlex Shamshur, Raman Ladutska
@online{shamshur:20220407:google:fbc0f89, author = {Alex Shamshur and Raman Ladutska}, title = {{Google is on guard: sharks shall not pass!}}, date = {2022-04-07}, organization = {Checkpoint}, url = {https://research.checkpoint.com/2022/google-is-on-guard-sharks-shall-not-pass/}, language = {English}, urldate = {2022-04-08} } Google is on guard: sharks shall not pass!
SharkBot
2022-03-03NCC GroupRIFT: Research and Intelligence Fusion Team
@online{team:20220303:sharkbot:da02f61, author = {RIFT: Research and Intelligence Fusion Team}, title = {{SharkBot: a “new” generation Android banking Trojan being distributed on Google Play Store}}, date = {2022-03-03}, organization = {NCC Group}, url = {https://research.nccgroup.com/2022/03/03/sharkbot-a-new-generation-android-banking-trojan-being-distributed-on-google-play-store/}, language = {English}, urldate = {2022-03-04} } SharkBot: a “new” generation Android banking Trojan being distributed on Google Play Store
SharkBot
2022-03-03Fox-ITAlberto Segura, Rolf Govers
@online{segura:20220303:sharkbot:58ba7e0, author = {Alberto Segura and Rolf Govers}, title = {{SharkBot: a “new” generation Android banking Trojan being distributed on Google Play Store}}, date = {2022-03-03}, organization = {Fox-IT}, url = {https://blog.fox-it.com/2022/03/03/sharkbot-a-new-generation-android-banking-trojan-being-distributed-on-google-play-store/}, language = {English}, urldate = {2022-03-04} } SharkBot: a “new” generation Android banking Trojan being distributed on Google Play Store
SharkBot
2021-11-11CleafyCleafy
@online{cleafy:20211111:sharkbot:efbc5a5, author = {Cleafy}, title = {{SharkBot: a new generation of Android Trojans is targeting banks in Europe}}, date = {2021-11-11}, organization = {Cleafy}, url = {https://www.cleafy.com/cleafy-labs/sharkbot-a-new-generation-of-android-trojan-is-targeting-banks-in-europe}, language = {English}, urldate = {2021-11-17} } SharkBot: a new generation of Android Trojans is targeting banks in Europe
SharkBot

There is no Yara-Signature yet.