Dridex leverages redirection attacks designed to send victims to malicious replicas of the banking sites they think they're visiting.+
Android malware galaxy based on multiple open sources..
+| + + | ++Android is a cluster galaxy available in JSON format at this location The JSON format can be freely reused in your application or automatically enabled in MISP. + | +
Unknown
+CopyCat is a fully developed malware with vast capabilities, including rooting devices, establishing persistency, and injecting code into Zygote – a daemon responsible for launching apps in the Android operating system – that allows the malware to control any activity on the device.
+Links |
+
| + |
Andr/Dropr-FH can silently record audio and video, monitor texts and calls, modify files, and ultimately spawn ransomware.
+Andr/Dropr-FH is also known as:
+GhostCtrl
+Links |
+
| + |
| + |
The malware, dubbed Judy, is an auto-clicking adware which was found on 41 apps developed by a Korean company. The malware uses infected devices to generate large amounts of fraudulent clicks on advertisements, generating revenues for the perpetrators behind it.
+Links |
+
| + |
| + |
The trojan waits in hiding until the user opens a banking or social media app. When this happens, the trojan shows an HTML-based overlay on top of the original app, alerting the user of an error, and asking to reauthenticate. Red Alert then collects the user’s credentials and sends them to its C&C server.
+Links |
+
https://www.bleepingcomputer.com/news/security/researchers-discover-new-android-banking-trojan/ |
+
DoubleLocker can change the device’s PIN, preventing victims from accessing their devices, and also encrypts the data requesting a ransom. It will misuse accessibility services after being installed by impersonating the Adobe Flash player - similar to BankBot.
+Links |
+
https://www.welivesecurity.com/2017/10/13/doublelocker-innovative-android-malware/ |
+
Svpeng is a Banking trojan which acts as a keylogger. If the Android device is not Russian, Svpeng will ask for permission to use accessibility services. In abusing this service it will gain administrator rights allowing it to draw over other apps, send and receive SMS and take screenshots when keys are pressed.
+Svpeng is also known as:
+Invisble Man
+Links |
+
https://securelist.com/a-new-era-in-mobile-banking-trojans/79198/ |
+
https://www.theregister.co.uk/2017/08/02/banking_android_malware_in_uk/ |
+
LokiBot is a banking trojan for Android 4.0 and higher. It can steal the information and send SMS messages. It has the ability to start web browsers, and banking applications, along with showing notifications impersonating other apps. Upon attempt to remove it will encrypt the devices' external storage requiring Bitcoins to decrypt files.
+Links |
+
https://clientsidedetection.com/lokibot_the_first_hybrid_android_malware.html[https://clientsidedetection.com/lokibot_the_first_hybrid_android_malware.html] |
+
The main goal of this malware is to steal banking credentials from the victim’s device. It usually impersonates flash player updaters, android system tools, or other legitimate applications.
+Links |
+
https://blog.fortinet.com/2017/09/19/a-look-into-the-new-strain-of-bankbot |
+
| + |
In rooted devices, Viking Horde installs software and executes code remotely to get access to the mobile data.
+Links |
+
http://www.alwayson-network.com/worst-types-android-malware-2016/ |
+
A Chinese advertising company has developed this malware. The malware has the power to take control of devices; it forces users to click advertisements and download apps. The malware uses a multistage attack chain.
+Links |
+
http://www.alwayson-network.com/worst-types-android-malware-2016/ |
+
http://blog.checkpoint.com/wp-content/uploads/2016/07/HummingBad-Research-report_FINAL-62916.pdf |
+
Ackposts is a Trojan horse for Android devices that steals the Contacts information from the compromised device and sends it to a predetermined location.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-072302-3943-99 |
+
Wirex is a Trojan horse for Android devices that opens a backdoor on the compromised device which then joins a botnet for conducting click fraud.
+Links |
+
https://krebsonsecurity.com/2017/08/tech-firms-team-up-to-take-down-wirex-android-ddos-botnet/ |
+
http://www.zdnet.com/article/wirex-ddos-malware-given-udp-flood-capabilities/ |
+
WannaLocker is a strain of ransomware for Android devices that encrypts files on the device’s external storage and demands a payment to decrypt them.
+Links |
+
https://fossbytes.com/wannalocker-ransomware-wannacry-android/ |
+
Switcher is a Trojan horse for Android devices that modifies Wi-Fi router DNS settings. Swticher attempts to infiltrate a router’s admin interface on the devices' WIFI network by using brute force techniques. If the attack succeeds, Switcher alters the DNS settings of the router, making it possible to reroute DNS queries to a network controlled by the malicious actors.
+Links |
+
| + |
https://www.theregister.co.uk/2017/01/03/android_trojan_targets_routers/ |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2017-090410-0547-99 |
+
Vibleaker was an app available on the Google Play Store named Beaver Gang Counter that contained malicious code that after specific orders from its maker would scan the user’s phone for the Viber app, and then steal photos and videos recorded or sent through the app.
+Links |
+
http://news.softpedia.com/news/malicious-android-app-steals-viber-photos-and-videos-505758.shtml |
+
ExpensiveWall is Android malware that sends fraudulent premium SMS messages and charges users accounts for fake services without their knowledge
+Links |
+
| + |
| + |
Cepsohord is a Trojan horse for Android devices that uses compromised devices to commit click fraud, modify DNS settings, randomly delete essential files, and download additional malware such as ransomware.
+Links |
+
https://www.cyber.nj.gov/threat-profiles/android-malware-variants/cepsohord |
+
Fakem RAT makes their network traffic look like well-known protocols (e.g. Messenger traffic, HTML pages).
+Links |
+
https://www.trendmicro.de/cloud-content/us/pdfs/security-intelligence/white-papers/wp-fakem-rat.pdf |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2016-012608-1538-99 |
+
GM Bot – also known as Acecard, SlemBunk, or Bankosy – scams people into giving up their banking log-in credentials and other personal data by displaying overlays that look nearly identical to banking apps log-in pages. Subsequently, the malware intercepts SMS to obtain two-factor authentication PINs, giving cybercriminals full access to bank accounts.
+GM Bot is also known as:
+Acecard
+SlemBunk
+Bankosy
+Links |
+
https://blog.avast.com/android-trojan-gm-bot-is-evolving-and-targeting-more-than-50-banks-worldwide |
+
The Wormhole vulnerability in the Moplus SDK could be exploited by hackers to open an unsecured and unauthenticated HTTP server connection on the user’s device, and this connection is established in the background without the user’s knowledge.
+Links |
+
http://securityaffairs.co/wordpress/41681/hacking/100m-android-device-baidu-moplus-sdk.html |
+
Adwind is a backdoor written purely in Java that targets system supporting the Java runtime environment. Commands that can be used, among other things, to display messages on the system, open URLs, update the malware, download/execute files, and download/load plugins. According to the author, the backdoor component can run on Windows, Mac OS, Linux and Android platforms providing rich capabilities for remote control, data gathering, data exfiltration and lateral movement.
+Adwind is also known as:
+AlienSpy
+Frutas
+Unrecom
+Sockrat
+Jsocket
+jRat
+Backdoor:Java/Adwind
+Links |
+
| + |
Adsms is a Trojan horse that may send SMS messages from Android devices.
+Links |
+
| + |
https://www.symantec.com/security_response/writeup.jsp?docid=2011-051313-4039-99 |
+
Airpush is a very aggresive Ad - Network
+Airpush is also known as:
+StopSMS
+Links |
+
https://crypto.stanford.edu/cs155old/cs155-spring16/lectures/18-mobile-malware.pdf |
+
BeanBot forwards device’s data to a remote server and sends out premium-rate SMS messages from the infected device.
+Links |
+
https://www.f-secure.com/v-descs/trojan_android_beanbot.shtml |
+
Kemoge is adware that disguises itself as popular apps via repackaging, then allows for a complete takeover of the users Android device.
+Links |
+
https://www.fireeye.com/blog/threat-research/2015/10/kemoge_another_mobi.html |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2015-101207-3555-99 |
+
Ghost Push is a family of malware that infects the Android OS by automatically gaining root access, downloading malicious software, masquerading as a system app, and then losing root access, which then makes it virtually impossible to remove the infection even by factory reset unless the firmware is reflashed.
+Links |
+
| + |
https://blog.avast.com/how-to-protect-your-android-device-from-ghost-push |
+
The BeNews app is a backdoor app that uses the name of defunct news site BeNews to appear legitimate. After installation it bypasses restrictions and downloads additional threats to the compromised device.
+Links |
+
| + |
Accstealer is a Trojan horse for Android devices that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2015-012711-1159-99 |
+
Acnetdoor is a detection for Trojan horses on the Android platform that open a back door on the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-051611-4258-99 |
+
Acnetsteal is a detection for Trojan horses on the Android platform that steal information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-051612-0505-99 |
+
Actech is a Trojan horse for Android devices that steals information and sends it to a remote location.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-080111-3948-99 |
+
AdChina is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-032814-2947-99 |
+
Adfonic is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-052615-0024-99 |
+
AdInfo is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040416-2433-99 |
+
Adknowledge is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-052822-1033-99 |
+
AdMarvel is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-060621-2450-99 |
+
AdMob is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-052822-3437-99 |
+
Adrd is a Trojan horse that steals information from Android devices.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-021514-4954-99 |
+
Aduru is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-052618-2419-99 |
+
Adwhirl is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-052918-1414-99 |
+
Adwlauncher is a Trojan horse for Android devices that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-082308-1823-99 |
+
Adwo is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-032814-5806-99 |
+
Airad is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-032815-1704-99 |
+
Alienspy is a Trojan horse for Android devices that steals information from the compromised device. It may also download potentially malicious files.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2015-042714-5942-99 |
+
AmazonAds is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-052618-5002-99 |
+
Answerbot is a Trojan horse that opens a back door on Android devices.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-100711-2129-99 |
+
Antammi is a Trojan horse that steals information from Android devices.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-032106-5211-99 |
+
Apkmore is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040113-4813-99 |
+
Aplog is a Trojan horse for Android devices that steals information from the device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-100911-1023-99 |
+
Appenda is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-062812-0516-99 |
+
Apperhand is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-032815-5637-99 |
+
Appleservice is a Trojan horse for Android devices that may steal information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-031011-4321-99 |
+
AppLovin is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040112-1739-99 |
+
Arspam is a Trojan horse for Android devices that sends spam SMS messages to contacts on the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-121915-3251-99 |
+
Aurecord is a spyware application for Android devices that allows the device it is installed on to be monitored.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-031914-2310-99 |
+
Backapp is a Trojan horse for Android devices that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-092708-5017-99 |
+
Backdexer is a Trojan horse for Android devices that may send premium-rate SMS messages from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-121812-2502-99 |
+
Backflash is a Trojan horse for Android devices that opens a back door and steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-091714-0427-99 |
+
Backscript is a Trojan horse for Android devices that downloads files onto the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-090704-3639-99 |
+
Badaccents is a Trojan horse for Android devices that may download apps on the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-123015-3618-99 |
+
Badpush is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040311-4133-99 |
+
Ballonpop is a Trojan horse for Android devices that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-120911-1731-99 |
+
Bankosy is a Trojan horse for Android devices that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-072316-5249-99 |
+
Bankun is a Trojan horse for Android devices that replaces certain banking applications on the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-072318-4143-99 |
+
Basebridge is a Trojan horse that attempts to send premium-rate SMS messages to predetermined numbers.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-060915-4938-99 |
+
Basedao is a Trojan horse for Android devices that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-061715-3303-99 |
+
Batterydoctor is Trojan that makes exaggerated claims about the device’s ability to recharge the battery, as well as steal information.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-101916-0847-99 |
+
Beaglespy is an Android mobile detection for the Beagle spyware program as well as its associated client application.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-091010-0627-99 |
+
Becuro is a Trojan horse for Android devices that downloads potentially malicious files onto the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2015-051410-3348-99 |
+
Beita is a Trojan horse for Android devices that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-110111-1829-99 |
+
Bgserv is a Trojan that opens a back door and transmits information from the device to a remote location.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-031005-2918-99 |
+
Biigespy is an Android mobile detection for the Biige spyware program as well as its associated client application.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-091012-0526-99 |
+
Bmaster is a Trojan horse on the Android platform that opens a back door, downloads files and steals potentially confidential information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-020609-3003-99 |
+
Bossefiv is a Trojan horse for Android devices that steals information.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2015-061520-4322-99 |
+
Boxpush is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040207-4613-99 |
+
Burstly is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-052918-1443-99 |
+
Buzzcity is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-052918-1454-99 |
+
ByPush is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040315-4708-99 |
+
Cajino is a Trojan horse for Android devices that opens a back door on the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2015-040210-3746-99 |
+
Casee is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-052919-3501-99 |
+
Catchtoken is a Trojan horse for Android devices that intercepts SMS messages and opens a back door on the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-121619-0548-99 |
+
Cauly is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-052919-3454-99 |
+
Cellshark is a spyware application for Android devices that periodically gathers information from the device and uploads it to a predetermined location.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-111611-0914-99 |
+
Centero is a Trojan horse for Android devices that displays advertisements on the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-053006-2502-99 |
+
Chuli is a Trojan horse for Android devices that opens a back door and may steal information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-032617-1604-99 |
+
Citmo is a Trojan horse for Android devices that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-030715-5012-99 |
+
Claco is a Trojan horse for Android devices that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-020415-5600-99 |
+
Clevernet is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040107-5257-99 |
+
Cnappbox is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040215-1141-99 |
+
Cobblerone is a spyware application for Android devices that can track the phone’s location and remotely erase the device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-111514-3846-99 |
+
Coolpaperleak is a Trojan horse for Android devices that steals information and sends it to a remote location.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-080211-5757-99 |
+
Coolreaper is a Trojan horse for Android devices that opens a back door on the compromised device. It may also steal information and download potentially malicious files.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2015-011220-3211-99 |
+
Cosha is a spyware program for Android devices that monitors and sends certain information to a remote location.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-081712-5231-99 |
+
Counterclank is a Trojan horse for Android devices that steals information.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-012709-4046-99 |
+
Crazymedia is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040312-2547-99 |
+
Crisis is a Trojan horse for Android devices that opens a back door and steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2015-071409-0636-99 |
+
Crusewind is a Trojan horse for Android devices that sends SMS messages to a premium-rate number.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-070301-5702-99 |
+
Dandro is a Trojan horse for Android devices that allows a remote attacker to gain control over the device and steal information from it.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-012916-2128-99 |
+
Daoyoudao is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040214-5018-99 |
+
Deathring is a Trojan horse for Android devices that may perform malicious activities on the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-121116-4547-99 |
+
Deeveemap is a Trojan horse for Android devices that downloads potentially malicious files onto the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2017-060907-5221-99 |
+
Dendoroid is a Trojan horse for Android devices that opens a back door, steals information, and may perform other malicious activities on the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-030418-2633-99 |
+
Dengaru is a Trojan horse for Android devices that performs click-fraud from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2015-051113-4819-99 |
+
Diandong is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040207-2453-99 |
+
Dianjin is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040107-0313-99 |
+
Dogowar is a Trojan horse on the Android platform that sends SMS texts to all contacts on the device. It is a repackaged version of a game application called Dog Wars, which can be downloaded from a third party market and must be manually installed.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-081510-4323-99 |
+
Domob is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040416-4235-99 |
+
Dougalek is a Trojan horse for Android devices that steals information from the compromised device. The threat is typically disguised to display a video.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-041601-3400-99 |
+
Dowgin is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-033108-4723-99 |
+
Droidsheep is a hacktool for Android devices that hijacks social networking accounts on compromised devices.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-031014-3628-99 |
+
Dropdialer is a Trojan horse for Android devices that sends SMS messages to a premium-rate phone number.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-070909-0726-99 |
+
Dupvert is a Trojan horse for Android devices that opens a back door and steals information from the compromised device. It may also perform other malicious activities.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-072313-1959-99 |
+
Dynamicit is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040407-1346-99 |
+
Ecardgrabber is an application that attempts to read details from NFC enabled credit cards. It attempts to read information from NFC enabled credit cards that are in close proximity.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-062215-0939-99 |
+
Ecobatry is a Trojan horse for Android devices that steals information and sends it to a remote location.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-080606-4102-99 |
+
Enesoluty is a Trojan horse for Android devices that steals information and sends it to a remote location.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-090607-0807-99 |
+
Everbadge is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040416-3736-99 |
+
Ewalls is a Trojan horse for the Android operating system that steals information from the mobile device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2010-073014-0854-99 |
+
Exprespam is a Trojan horse for Android devices that displays a fake message and steals personal information stored on the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-010705-2324-99 |
+
Fakealbums is a Trojan horse for Android devices that monitors and forwards received messages from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-071819-0636-99 |
+
Fakeangry is a Trojan horse on the Android platform that opens a back door, downloads files, and steals potentially confidential information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-022823-4233-99 |
+
Fakeapp is a Trojan horse for Android devices that downloads configuration files to display advertisements and collects information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-022805-4318-99 |
+
Fakebanco is a Trojan horse for Android devices that redirects users to a phishing page in order to steal their information.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-112109-5329-99 |
+
Fakebank is a Trojan horse that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-071813-2448-99 |
+
Fakebank.B is a Trojan horse for Android devices that opens a back door and steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-101114-5645-99 |
+
Fakebok is a Trojan horse for Android devices that sends SMS messages to premium phone numbers.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-021115-5153-99 |
+
Fakedaum is a Trojan horse for Android devices that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-061813-3630-99 |
+
Fakedefender is a Trojan horse for Android devices that displays fake security alerts in an attempt to convince the user to purchase an app in order to remove non-existent malware or security risks from the device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-060301-4418-99 |
+
Fakedefender.B is a Trojan horse for Android devices that displays fake security alerts in an attempt to convince the user to purchase an app in order to remove non-existent malware or security risks from the device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-091013-3953-99 |
+
Fakedown is a Trojan horse for Android devices that downloads more malicious apps onto the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-041803-5918-99 |
+
Fakeflash is a Trojan horse for Android devices that installs a fake Flash application in order to direct users to a website.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-070318-2122-99 |
+
Fakegame is a Trojan horse for Android devices that displays advertisements and steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-040808-2922-99 |
+
Fakeguard is a Trojan horse for Android devices that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-102908-3526-99 |
+
Fakejob is a Trojan horse for Android devices that redirects users to scam websites.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-030721-3048-99 |
+
Fakekakao is a Trojan horse for Android devices sends SMS messages to contacts stored on the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-071617-2031-99 |
+
Fakelemon is a Trojan horse for Android devices that blocks certain SMS messages and may subscribe to services without the user’s consent.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-120609-3608-99 |
+
Fakelicense is a Trojan horse that displays advertisements on the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-062709-1437-99 |
+
Fakelogin is a Trojan horse for Android devices that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2015-102108-5457-99 |
+
FakeLookout is a Trojan horse for Android devices that opens a back door and steals information on the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-101919-2128-99 |
+
FakeMart is a Trojan horse for Android devices that may send SMS messages to premium rate numbers. It may also block incoming messages and steal information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-081217-1428-99 |
+
Fakemini is a Trojan horse for Android devices that disguises itself as an installation for the Opera Mini browser and sends premium-rate SMS messages to a predetermined number.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-110410-5958-99 |
+
Fakemrat is a Trojan horse for Android devices that opens a back door and steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2016-012608-1538-99 |
+
Fakeneflic is a Trojan horse that steals information from Android devices.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-101105-0518-99 |
+
Fakenotify is a Trojan horse for Android devices that sends SMS messages to premium-rate phone numbers, collects and sends information, and periodically displays Web pages. It also downloads legitimate apps onto the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-011302-3052-99 |
+
Fakepatch is a Trojan horse for Android devices that downloads more files on to the device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-062811-2820-99 |
+
Fakeplay is a Trojan horse for Android devices that steals information from the compromised device and sends it to a predetermined email address.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-100917-3825-99 |
+
Fakescarav is a Trojan horse for Android devices that displays fake security alerts in an attempt to convince the user to pay in order to remove non-existent malware or security risks from the device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2015-012809-1901-99 |
+
Fakesecsuit is a Trojan horse for Android devices that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-060514-1301-99 |
+
Fakesucon is a Trojan horse program for Android devices that sends SMS messages to premium-rate phone numbers.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-120915-2524-99 |
+
Faketaobao is a Trojan horse for Android devices that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-062518-4057-99 |
+
Faketaobao.B is a Trojan horse for Android devices that intercepts and and sends incoming SMS messages to a remote attacker.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-012106-4013-99 |
+
Faketoken is a Trojan horse that opens a back door on the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-032211-2048-99 |
+
http://bgr.com/2017/08/18/android-malware-faketoken-steal-credit-card-info/ |
+
Fakeupdate is a Trojan horse for Android devices that downloads other applications onto the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-081914-5637-99 |
+
Fakevoice is a Trojan horse for Android devices that dials a premium-rate phone number.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-040510-3249-99 |
+
Farmbaby is a spyware application for Android devices that logs certain information and sends SMS messages to a predetermined phone number.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-090715-3641-99 |
+
Fauxtocopy is a spyware application for Android devices that gathers photos from the device and sends them to a predetermined email address.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-111515-3940-99 |
+
Feiwo is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040107-4038-99 |
+
FindAndCall is a Potentially Unwanted Application for Android devices that may leak information.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-031020-2906-99 |
+
Finfish is a Trojan horse for Android devices that opens a back door and steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-083016-0032-99 |
+
Fireleaker is a Trojan horse for Android devices that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-031814-5207-99 |
+
Fitikser is a Trojan horse for Android devices that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-093015-2830-99 |
+
Flexispy is a Spyware application for Android devices that logs the device’s activity and sends it to a predetermined website.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-122006-4805-99 |
+
Fokonge is a Trojan horse that steals information from Android devices.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-071802-0727-99 |
+
FoncySMS is a Trojan horse for Android devices that sends SMS messages to premium-rate phone numbers. It may also connect to an IRC server and execute any received shell commands.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-011502-2651-99 |
+
Frogonal is a Trojan horse for Android devices that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-062205-2312-99 |
+
Ftad is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040114-2020-99 |
+
Funtasy is a Trojan horse for Android devices that subscribes the user to premium SMS services.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-092519-5811-99 |
+
GallMe is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040312-1336-99 |
+
Gamex is a Trojan horse for Android devices that downloads further threats.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-051015-1808-99 |
+
Gappusin is a Trojan horse for Android devices that downloads applications and disguises them as system updates.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-022007-2013-99 |
+
Gazon is a worm for Android devices that spreads through SMS messages.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2015-030320-1436-99 |
+
Geinimi is a Trojan that opens a back door and transmits information from the device to a remote location.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-010111-5403-99 |
+
Generisk is a generic detection for Android applications that may pose a privacy, security, or stability risk to the user or user’s Android device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-062622-1559-99 |
+
Genheur is a generic detection for many individual but varied Trojans for Android devices for which specific definitions have not been created. A generic detection is used because it protects against many Trojans that share similar characteristics.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-032613-0848-99 |
+
Genpush is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-033109-0426-99 |
+
GeoFake is a Trojan horse for Android devices that sends SMS messages to premium-rate numbers.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-040217-3232-99 |
+
Geplook is a Trojan horse for Android devices that downloads additional apps onto the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-121814-0917-99 |
+
Getadpush is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040112-0957-99 |
+
Ggtracker is a Trojan horse for Android devices that sends SMS messages to a premium-rate number. It may also steal information from the device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-062208-5013-99 |
+
Ghostpush is a Trojan horse for Android devices that roots the compromised device. It may then perform malicious activities on the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2015-100215-3718-99 |
+
Gmaster is a Trojan horse on the Android platform that steals potentially confidential information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-082404-5049-99 |
+
Godwon is a Trojan horse for Android devices that steals information.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-091017-1833-99 |
+
Golddream is a Trojan horse that steals information from Android devices.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-070608-4139-99 |
+
Goldeneagle is a Trojan horse that steals information from Android devices.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-090110-3712-99 |
+
Golocker is a Trojan horse for Android devices that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-062003-3214-99 |
+
Gomal is a Trojan horse for Android devices that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-101312-1047-99 |
+
Gonesixty is a Trojan horse that steals information from Android devices.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-093001-2649-99 |
+
Gonfu is a Trojan horse that steals information from Android devices.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-060610-3953-99 |
+
Gonfu.B is a Trojan horse that steals information from Android devices.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-030811-5215-99 |
+
Gonfu.C is a Trojan horse for Android devices that may download additional threats on the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-031817-3639-99 |
+
Gonfu.D is a Trojan horse that opens a back door on Android devices.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-040414-1158-99 |
+
Gooboot is a Trojan horse for Android devices that may send text messages to premium rate numbers.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-031818-3034-99 |
+
Goodadpush is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040108-0913-99 |
+
Greystripe is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-052919-2643-99 |
+
Gugespy is a spyware program for Android devices that logs the device’s activity and sends it to a predetermined email address.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-071822-2515-99 |
+
Gugespy.B is a spyware program for Android devices that monitors and sends certain information to a remote location.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-070511-5038-99 |
+
Gupno is a Trojan horse for Android devices that poses as a legitimate app and attempts to charge users for features that are normally free. It may also display advertisements on the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2015-072211-5533-99 |
+
Habey is a Trojan horse for Android devices that may attempt to delete files and send SMS messages from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-100608-4512-99 |
+
Handyclient is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040307-5027-99 |
+
Hehe is a Trojan horse for Android devices that blocks incoming calls and SMS messages from specific numbers. The Trojan also steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-012211-0020-99 |
+
Hesperbot is a Trojan horse for Android devices that opens a back door on the compromised device and may steal information.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-121010-1120-99 |
+
Hippo is a Trojan horse that sends SMS messages to premium-rate phone numbers.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-071215-3547-99 |
+
Hippo.B is a Trojan horse that sends SMS messages to premium-rate phone numbers.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-031915-0151-99 |
+
IadPush is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040315-4104-99 |
+
iBanking is a Trojan horse for Android devices that opens a back door on the compromised device and may steal information.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-030713-0559-99 |
+
Iconosis is a Trojan horse for Android devices that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-062107-3327-99 |
+
Iconosys is a Trojan horse for Android devices that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-081309-0341-99 |
+
Igexin is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2015-032606-5519-99 |
+
ImAdPush is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040323-0218-99 |
+
InMobi is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-052713-1527-99 |
+
Jifake is a Trojan horse for Android devices that sends SMS messages to premium-rate phone numbers.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-073021-4247-99 |
+
Jollyserv is a Trojan horse for Android devices that sends SMS messages and steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-090311-4533-99 |
+
Jsmshider is a Trojan horse that opens a back door on Android devices.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-062114-0857-99 |
+
Ju6 is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040416-2428-99 |
+
Jumptap is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-052713-0859-99 |
+
Jzmob is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040207-1703-99 |
+
Kabstamper is a Trojan horse for Android devices that corrupts images found on the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-060706-2305-99 |
+
Kidlogger is a Spyware application for Android devices that logs the device’s activity and sends it to a predetermined website.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-122014-1927-99 |
+
Kielog is a Trojan horse for Android devices that logs keystrokes and sends the stolen information to the remote attacker.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-040205-4035-99 |
+
Kituri is a Trojan horse for Android devices that blocks certain SMS messages from being received by the device. It may also send SMS messages to a premium-rate number.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-061111-5350-99 |
+
Kranxpay is a Trojan horse for Android devices that downloads other apps onto the device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-071009-0809-99 |
+
Krysanec is a Trojan horse for Android devices that opens a back door on the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-090113-4128-99 |
+
Kuaidian360 is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040109-2415-99 |
+
Kuguo is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040315-5215-99 |
+
Lastacloud is a Trojan horse for Android devices that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-121216-4334-99 |
+
Laucassspy is a spyware program for Android devices that steals information and sends it to a remote location.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-092409-1822-99 |
+
Lifemonspy is a spyware application for Android devices that can track the phone’s location, download SMS messages, and erase certain data from the device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-111516-5540-99 |
+
Lightdd is a Trojan horse that steals information from Android devices.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-053114-2342-99 |
+
Loaderpush is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040108-0244-99 |
+
Locaspy is a Potentially Unwanted Application for Android devices that tracks the location of the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-030720-3500-99 |
+
Lockdroid.E is a Trojan horse for Android devices that locks the screen and displays a ransom demand on the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-103005-2209-99 |
+
Lockdroid.F is a Trojan horse for Android devices that locks the screen and displays a ransom demand on the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-102215-4346-99 |
+
Lockdroid.G is a Trojan horse for Android devices that may display a ransom demand on the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-050610-2450-99 |
+
Lockdroid.H is a Trojan horse for Android devices that locks the screen and displays a ransom demand on the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2016-031621-1349-99 |
+
Lockscreen is a Trojan horse for Android devices that locks the compromised device from use.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2015-032409-0743-99 |
+
LogiaAd is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-052713-0348-99 |
+
Loicdos is an Android application that provides an interface to a website in order to perform a denial of service (DoS) attack against a computer.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-022002-2431-99 |
+
Loozfon is a Trojan horse for Android devices that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-082005-5451-99 |
+
Lotoor is a generic detection for hack tools that exploit vulnerabilities in order to gain root privileges on compromised Android devices.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-091922-4449-99 |
+
Lovespy is a Trojan horse for Android devices that steals information from the device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-071814-3805-99 |
+
Lovetrap is a Trojan horse that sends SMS messages to premium-rate phone numbers.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-072806-2905-99 |
+
Luckycat is a Trojan horse for Android devices that opens a back door and steals information on the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-080617-5343-99 |
+
Machinleak is a Trojan horse for Android devices that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-120311-2440-99 |
+
Maistealer is a Trojan that steals information from Android devices.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-072411-4350-99 |
+
Malapp is a generic detection for many individual but varied threats on Android devices that share similar characteristics.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-073014-3354-99 |
+
Malebook is a Trojan horse for Android devices that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-071206-3403-99 |
+
Malhome is a Trojan horse for Android devices that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-071118-0441-99 |
+
Malminer is a Trojan horse for Android devices that mines cryptocurrencies on the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-032712-3709-99 |
+
Mania is a Trojan horse for Android devices that sends SMS messages to a premium-rate phone number.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-070623-1520-99 |
+
Maxit is a Trojan horse for Android devices that opens a back door on the compromised device. It also steals certain information and uploads it to a remote location.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-120411-2511-99 |
+
MdotM is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-052712-5824-99 |
+
Medialets is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-052712-5222-99 |
+
Meshidden is a spyware application for Android devices that allows the device it is installed on to be monitored.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-031913-5257-99 |
+
Mesploit is a tool for Android devices used to create applications that exploit the Android Fake ID vulnerability.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2015-032014-2847-99 |
+
Mesprank is a Trojan horse for Android devices that opens a back door on the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-030717-1933-99 |
+
Meswatcherbox is a spyware application for Android devices that forwards SMS messages without the user knowing.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-111612-2736-99 |
+
Miji is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-032815-4720-99 |
+
Milipnot is a Trojan horse for Android devices that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-070414-0941-99 |
+
MillennialMedia is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-052712-4602-99 |
+
Mitcad is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040212-0528-99 |
+
MobClix is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-052712-4011-99 |
+
MobFox is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-052712-3050-99 |
+
Mobidisplay is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040312-0435-99 |
+
Mobigapp is a Trojan horse for Android devices that downloads applications disguised as system updates.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-062520-5802-99 |
+
MobileBackup is a spyware application for Android devices that monitors the affected device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-031020-0040-99 |
+
Mobilespy is a Trojan horse that steals information from Android devices.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-071512-0653-99 |
+
Mobiletx is a Trojan horse for Android devices that steals information from the compromised device. It may also send SMS messages to a premium-rate number.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-052807-4439-99 |
+
Mobinaspy is a spyware application for Android devices that can track the device’s location.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-111516-0511-99 |
+
Mobus is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040416-2006-99 |
+
MobWin is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040416-1522-99 |
+
Mocore is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2015-092112-4603-99 |
+
Moghava is a Trojan horse for Android devices that modifies images that are stored on the device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-022712-2822-99 |
+
Momark is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040113-5529-99 |
+
Monitorello is a spyware application for Android devices that allows the device it is installed on to be monitored.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-031914-4737-99 |
+
Moolah is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040416-1007-99 |
+
MoPub is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-052712-2456-99 |
+
Morepaks is a Trojan horse for Android devices that downloads remote files and may display advertisements on the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-071204-1130-99 |
+
Nandrobox is a Trojan horse for Android devices that steals information from the compromised device. It also deletes certain SMS messages from the device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-070212-2132-99 |
+
Netisend is a Trojan horse that steals information from Android devices.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-080207-1139-99 |
+
Nickispy is a Trojan horse that steals information from Android devices.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-072714-3613-99 |
+
Notcompatible is a Trojan horse for Android devices that acts as a proxy.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-050307-2712-99 |
+
Nuhaz is a Trojan horse for Android devices that may intercept text messages on the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-031814-3416-99 |
+
Nyearleaker is a Trojan horse program for Android devices that steals information.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-010514-0844-99 |
+
Obad is a Trojan horse for Android devices that opens a back door, steals information, and downloads files. It also sends SMS messages to premium-rate numbers and spreads malware to Bluetooth-enabled devices.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-060411-4146-99 |
+
Oneclickfraud is a Trojan horse for Android devices that attempts to coerce a user into paying for a pornographic service.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-011205-4412-99 |
+
Opfake is a detection for Trojan horses on the Android platform that send SMS texts to premium-rate numbers.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-012709-2732-99 |
+
Opfake.B is a Trojan horse for the Android platform that may receive commands from a remote attacker to perform various functions.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-022406-1309-99 |
+
Ozotshielder is a Trojan horse that steals information from Android devices.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-091505-3230-99 |
+
Pafloat is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040215-2015-99 |
+
PandaAds is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040312-1959-99 |
+
Pandbot is a Trojan horse for Android devices that may download more files onto the device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-071215-1454-99 |
+
Pdaspy is a spyware application for Android devices that periodically gathers information from the device and uploads it to a predetermined location.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-111612-0749-99 |
+
Penetho is a hacktool for Android devices that can be used to crack the WiFi password of the router that the device is using.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-100110-3614-99 |
+
Perkel is a Trojan horse for Android devices that may steal information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-082811-4213-99 |
+
Phimdropper is a Trojan horse for Android devices that sends and intercepts incoming SMS messages.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-021002-2943-99 |
+
Phospy is a Trojan horse for Android devices that steals confidential information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-060706-4803-99 |
+
Piddialer is a Trojan horse for Android devices that dials premium-rate numbers from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-111020-2247-99 |
+
Pikspam is a Trojan horse for Android devices that sends spam SMS messages from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-121815-0336-99 |
+
Pincer is a Trojan horse for Android devices that steals confidential information and opens a back door on the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-052307-3530-99 |
+
Pirator is a Trojan horse on the Android platform that downloads files and steals potentially confidential information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-021609-5740-99 |
+
Pjapps is a Trojan horse that has been embedded on third party applications and opens a back door on the compromised device. It retrieves commands from a remote command and control server.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-022303-3344-99 |
+
Pjapps.B is a Trojan horse for Android devices that opens a back door on the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-032014-1624-99 |
+
Pletora is a is a Trojan horse for Android devices that may lock the compromised device. It then asks the user to pay in order to unlock the device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-061217-4345-99 |
+
Poisoncake is a Trojan horse for Android devices that opens a back door on the compromised device. It may also download potentially malicious files and steal information.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2015-010610-0726-99 |
+
Pontiflex is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-052618-0946-99 |
+
Positmob is a Trojan horse program for Android devices that sends SMS messages to premium rate phone numbers.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-111409-1556-99 |
+
Premiumtext is a detection for Trojan horses on the Android platform that send SMS texts to premium-rate numbers. These Trojans will often be repackaged versions of genuine Android software packages, often distributed outside the Android Marketplace.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-080213-5308-99 |
+
Pris is a Trojan horse for Android devices that silently downloads a malicious application and attempts to open a back door on the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-061820-5638-99 |
+
Qdplugin is a Trojan horse for Android devices that opens a back door and steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-102510-3330-99 |
+
Qicsomos is a Trojan horse for Android devices that sends SMS messages to a premium-rate phone number.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-011007-2223-99 |
+
Qitmo is a Trojan horse for Android devices that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-030716-4923-99 |
+
Rabbhome is a Trojan horse for Android devices that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-053007-3750-99 |
+
Repane is a Trojan horse for Android devices that steals information and sends SMS messages from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-090411-5052-99 |
+
Reputation.1 is a detection for Android files based on analysis performed by Norton Mobile Insight.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-022612-2619-99 |
+
Reputation.2 is a detection for Android files based on analysis performed by Norton Mobile Insight.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-022613-2629-99 |
+
Reputation.3 is a detection for Android files based on analysis performed by Norton Mobile Insight.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-022613-3126-99 |
+
RevMob is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040308-0502-99 |
+
Roidsec is a Trojan horse for Android devices that steals confidential information.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-052022-1227-99 |
+
Rootcager is a Trojan horse that steals information from Android devices.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-030212-1438-99 |
+
Rootnik is a Trojan horse for Android devices that steals information and downloads additional apps.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2016-062710-0328-99 |
+
Rufraud is a Trojan horse for Android devices that sends SMS messages to premium-rate phone numbers.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-121306-2304-99 |
+
Rusms is a Trojan horse for Android devices that sends SMS messages and steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-061711-5009-99 |
+
Samsapo is a worm for Android devices that spreads by sending SMS messages to all contacts stored on the compromised device. It also opens a back door and downloads files.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-050111-1908-99 |
+
Sandorat is a Trojan horse for Android devices that opens a back door on the compromised device. It also steals information.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-110720-2146-99 |
+
Sberick is a Trojan horse for Android devices that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-071014-2146-99 |
+
Scartibro is a Trojan horse for Android devices that locks the compromised device and asks the user to pay in order to unlock it.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-080718-2038-99 |
+
Scipiex is a Trojan horse for Android devices that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-100814-4702-99 |
+
Selfmite is a worm for Android devices that spreads through SMS messages.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-070111-5857-99 |
+
Selfmite.B is a worm for Android devices that displays ads on the compromised device. It spreads through SMS messages.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-101013-4717-99 |
+
SellARing is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040407-3157-99 |
+
SendDroid is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040311-2111-99 |
+
Simhosy is a Trojan horse for Android devices that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-061013-3955-99 |
+
Simplocker is a Trojan horse for Android devices that may encrypt files on the compromised device. It then asks the user to pay in order to decrypt these files.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-060610-5533-99 |
+
Simplocker.B is a Trojan horse for Android devices that may encrypt files on the compromised device. It then asks the user to pay in order to decrypt these files.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-072317-1950-99 |
+
Skullkey is a Trojan horse for Android devices that gives the attacker remote control of the compromised device to perform malicious activity.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-072322-5422-99 |
+
Smaato is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-052622-1755-99 |
+
Smbcheck is a hacktool for Android devices that can trigger a Server Message Block version 2 (SMBv2) vulnerability and may cause the target computer to crash.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-032613-5634-99 |
+
Smsblocker is a generic detection for threats on Android devices that block the transmission of SMS messages.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-081607-4001-99 |
+
Smsbomber is a program that can be used to send messages to contacts on the device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-112611-5837-99 |
+
Smslink is a Trojan horse for Android devices that may send malicious SMS messages from the compromised device. It may also display advertisements.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-112600-3035-99 |
+
Smspacem is a Trojan horse that may send SMS messages from Android devices.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-052310-1322-99 |
+
SMSReplicator is a spying utility that will secretly transmit incoming SMS messages to another phone of the installer’s choice.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2010-110214-1252-99 |
+
Smssniffer is a Trojan horse that intercepts SMS messages on Android devices.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-071108-3626-99 |
+
Smsstealer is a Trojan horse for Android devices that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-121514-0214-99 |
+
Smstibook is a Trojan horse that attempts to send premium-rate SMS messages to predetermined numbers.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-051207-4833-99 |
+
Smszombie is a Trojan horse for Android devices that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-082011-0922-99 |
+
Snadapps is a Trojan horse that steals information from Android devices.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-071807-3111-99 |
+
Sockbot is a Trojan horse for Android devices that creates a SOCKS proxy on the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2017-101314-1353-99 |
+
Sockrat is a Trojan horse for Android devices that opens a back door and steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2015-110509-4646-99 |
+
Sofacy is a Trojan horse for Android devices that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2017-010508-5201-99 |
+
Sosceo is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040408-0609-99 |
+
Spitmo is a Trojan horse that steals information from Android devices.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-091407-1435-99 |
+
Spitmo.B is a Trojan horse for Android devices that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-030715-0445-99 |
+
Spyagent is a spyware application for Android devices that logs certain information and sends SMS messages to a predetermined phone number.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-090710-1836-99 |
+
Spybubble is a Spyware application for Android devices that logs the device’s activity and sends it to a predetermined website.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-121917-0335-99 |
+
Spydafon is a Potentially Unwanted Application for Android devices that monitors the affected device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-030722-4740-99 |
+
Spymple is a spyware application for Android devices that allows the device it is installed on to be monitored.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-031914-5403-99 |
+
Spyoo is a spyware program for Android devices that records and sends certain information to a remote location.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-081709-0457-99 |
+
Spytekcell is a spyware program for Android devices that monitors and sends certain information to a remote location.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-121021-0730-99 |
+
Spytrack is a spyware program for Android devices that periodically sends certain information to a remote location.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-080109-5710-99 |
+
Spywaller is a Trojan horse for Android devices that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2015-121807-0203-99 |
+
Stealthgenie is a Trojan horse for Android devices that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-111416-1306-99 |
+
Steek is a potentially unwanted application that is placed on a download website for Android applications and disguised as popular applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-010911-3142-99 |
+
Stels is a Trojan horse for Android devices that opens a back door and steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-032910-0254-99 |
+
Stiniter is a Trojan horse for Android devices that sends SMS messages to a premium-rate phone number.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-030903-5228-99 |
+
Sumzand is a Trojan horse for Android devices that steals information and sends it to a remote location.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-080308-2851-99 |
+
Sysecsms is a Trojan horse for Android devices that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-122714-5228-99 |
+
Tanci is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-032815-4108-99 |
+
Tapjoy is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-052619-4702-99 |
+
Tapsnake is a Trojan horse for Android phones that is embedded into a game. It tracks the phone’s location and posts it to a remote web service.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2010-081214-2657-99 |
+
Tascudap is a Trojan horse for Android devices that uses the compromised device in denial of service attacks.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-121312-4547-99 |
+
Teelog is a Trojan horse for Android devices that opens a back door and steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-040215-2736-99 |
+
Temai is a Trojan horse for Android applications that opens a back door and downloads malicious files onto the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-091722-4052-99 |
+
Tetus is a Trojan horse for Android devices that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-012409-4705-99 |
+
Tgpush is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-032816-0259-99 |
+
Tigerbot is a Trojan horse for Android devices that opens a back door on the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-041010-2221-99 |
+
Tonclank is a Trojan horse that steals information and may open a back door on Android devices.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-061012-4545-99 |
+
Trogle is a worm for Android devices that may steal information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-081213-5553-99 |
+
Twikabot is a Trojan horse for Android devices that attempts to steal information.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-062614-5813-99 |
+
Uapush is a Trojan horse for Android devices that steals information from the compromised device. It may also display advertisements and send SMS messages from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-040114-2910-99 |
+
Umeng is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040307-5749-99 |
+
Updtbot is a Trojan horse for Android devices that may arrive through SMS messages. It may then open a back door on the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-041611-4136-99 |
+
Upush is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040207-0733-99 |
+
Uracto is a Trojan horse for Android devices that steals personal information and sends spam SMS messages to contacts found on the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-031805-2722-99 |
+
Uranico is a Trojan horse for Android devices that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-052803-3835-99 |
+
Usbcleaver is a Trojan horse for Android devices that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-062010-1818-99 |
+
Utchi is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040107-2536-99 |
+
Uten is a Trojan horse for Android devices that may send, block, and delete SMS messages on a compromised device. It may also download and install additional applications and attempt to gain root privileges.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-092316-4752-99 |
+
Uupay is a Trojan horse for Android devices that steals information from the compromised device. It may also download additional malware.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-061714-1550-99 |
+
Uxipp is a Trojan horse that attempts to send premium-rate SMS messages to predetermined numbers.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-060910-5804-99 |
+
Vdloader is a Trojan horse for Android devices that opens a back door on the compromised device and steals confidential information.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-080209-1420-99 |
+
VDopia is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-052712-1559-99 |
+
Virusshield is a Trojan horse for Android devices that claims to scan apps and protect personal information, but has no real functionality.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040810-5457-99 |
+
VServ is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-052619-3117-99 |
+
Walkinwat is a Trojan horse that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-033008-4831-99 |
+
Waps is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040406-5437-99 |
+
Waren is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-032815-5501-99 |
+
Windseeker is a Trojan horse for Android devices that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-101519-0720-99 |
+
Wiyun is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040207-5646-99 |
+
Wooboo is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040407-5829-99 |
+
Wqmobile is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040407-4926-99 |
+
YahooAds is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-060621-3229-99 |
+
Yatoot is a Trojan horse for Android devices that steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-031408-4748-99 |
+
Yinhan is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040107-3350-99 |
+
Youmi is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-040407-4318-99 |
+
YuMe is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-060621-0322-99 |
+
Zeahache is a Trojan horse that elevates privileges on the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2011-032309-5042-99 |
+
ZertSecurity is a Trojan horse for Android devices that steals information and sends it to a remote attacker.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2013-050820-4100-99 |
+
ZestAdz is an advertisement library that is bundled with certain Android applications.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2014-052616-3821-99 |
+
Zeusmitmo is a Trojan horse for Android devices that opens a back door and steals information from the compromised device.
+Links |
+
https://www.symantec.com/security_response/writeup.jsp?docid=2012-080818-0448-99 |
+
A list of banker malware..
+| + + | ++Banker is a cluster galaxy available in JSON format at this location The JSON format can be freely reused in your application or automatically enabled in MISP. + | +
Unknown
+Zeus is a trojan horse that is primarily delivered via drive-by-downloads, malvertising, exploit kits and malspam campaigns. It uses man-in-the-browser keystroke logging and form grabbing to steal information from victims. Source was leaked in 2011.
+Zeus is also known as:
+Zbot
+Links |
+
https://usa.kaspersky.com/resource-center/threats/zeus-virus |
+
Delivered primarily by exploit kits as well as malspam campaigns utilizing macro based Microsoft Office documents as attachments. Vawtrak/Neverquest is a modularized banking trojan designed to steal credentials through harvesting, keylogging, Man-In-The-Browser, etc.
+Vawtrak is also known as:
+Neverquest
+Dridex leverages redirection attacks designed to send victims to malicious replicas of the banking sites they think they're visiting.+
Dridex is also known as:
+Feodo Version D
+Links |
+
| + |
| + |
Banking trojan delivered primarily via email (typically malspam) and exploit kits. Gozi 1.0 source leaked in 2010
+Gozi is also known as:
+Ursnif
+CRM
+Snifula
+Papras
+Links |
+
| + |
https://www.gdatasoftware.com/blog/2016/11/29325-analysis-ursnif-spying-on-your-data-since-2007 |
+
| + |
Banking trojan attributed to Project Blitzkrieg targeting U.S. Financial institutions.
+Goziv2 is also known as:
+Prinimalka
+Links |
+
| + |
| + |
| + |
Banking trojan based on Gozi source. Features include web injects for the victims’ browsers, screenshoting, video recording, transparent redirections, etc. Source leaked ~ end of 2015.
+Links |
+
https://www.govcert.admin.ch/blog/18/gozi-isfb-when-a-bug-really-is-a-feature |
+
| + |
https://info.phishlabs.com/blog/the-unrelenting-evolution-of-vawtrak |
+
| + |
Dreambot is a variant of Gozi ISFB that is spread via numerous exploit kits as well as through malspam email attachments and links.
+Links |
+
| + |
https://www.proofpoint.com/us/threat-insight/post/ursnif-variant-dreambot-adds-tor-functionality |
+
| + |
GozNym hybrid takes the best of both the Nymaim and Gozi ISFB. From the Nymaim malware, it leverages the dropper’s stealth and persistence; the Gozi ISFB parts add the banking Trojan’s capabilities to facilitate fraud via infected Internet browsers.
+Links |
+
https://securityintelligence.com/meet-goznym-the-banking-malware-offspring-of-gozi-isfb-and-nymaim/ |
+
| + |
Zloader is a loader that loads different payloads, one of which is a Zeus module. Delivered via exploit kits and malspam emails.
+Zloader Zeus is also known as:
+Zeus Terdot
+Links |
+
https://blog.threatstop.com/zloader/terdot-that-man-in-the-middle |
+
| + |
Zeus variant that utilizes steganography in image files to retrieve configuration file.
+Zeus VM is also known as:
+VM Zeus
+Links |
+
| + |
https://securityintelligence.com/new-zberp-trojan-discovered-zeus-zbot-carberp/ |
+
Sphinx is a modular banking trojan that is a commercial offering sold to cybercriminals via underground fraudster boards.
+Links |
+
https://securityintelligence.com/brazil-cant-catch-a-break-after-panda-comes-the-sphinx/ |
+
Zeus like banking trojan that is delivered primarily through malspam emails and exploit kits.
+Panda Banker is also known as:
+Zeus Panda
+Links |
+
https://www.proofpoint.com/us/threat-insight/post/panda-banker-new-banking-trojan-hits-the-market |
+
https://cyberwtf.files.wordpress.com/2017/07/panda-whitepaper.pdf |
+
Zeus KINS is a modified version of ZeuS 2.0.8.9. It contains an encrypted version of it’s config in the registry.
+Zeus KINS is also known as:
+Kasper Internet Non-Security
+Maple
+Links |
+
https://securityintelligence.com/zeus-maple-variant-targets-canadian-online-banking-customers/ |
+
| + |
Chthonic according to Kaspersky is an evolution of Zeus VM. It uses the same encryptor as Andromeda bot, the same encryption scheme as Zeus AES and Zeus V2 Trojans, and a virtual machine similar to that used in ZeusVM and KINS malware.
+Links |
+
| + |
https://securelist.com/chthonic-a-new-modification-of-zeus/68176/ |
+
Trickbot is a bot that is delivered via exploit kits and malspam campaigns. The bot is capable of downloading modules, including a banker module. Trickbot also shares roots with the Dyre banking trojan
+Trickbot is also known as:
+Trickster
+Trickloader
+Links |
+
https://blog.malwarebytes.com/threat-analysis/2016/10/trick-bot-dyrezas-successor/ |
+
| + |
http://www.pwc.co.uk/issues/cyber-security-data-privacy/research/trickbots-bag-of-tricks.html |
+
https://www.flashpoint-intel.com/blog/new-version-trickbot-adds-worm-propagation-module/ |
+
Dyre is a banking trojan distributed via exploit kits and malspam emails primarily. It has a modular architectur and utilizes man-in-the-browser functionality. It also leverages a backconnect server that allows threat actors to connect to a bank website through the victim’s computer.
+Dyre is also known as:
+Dyreza
+Links |
+
| + |
https://blog.malwarebytes.com/threat-analysis/2015/11/a-technical-look-at-dyreza/ |
+
Tinba is a very small banking trojan that hooks into browsers and steals login data and sniffs on network traffic. It also uses Man in The Browser (MiTB) and webinjects. Tinba is primarily delivered via exploit kits, malvertising and malspam email campaigns.
+Tinba is also known as:
+Zusy
+TinyBanker
+illi
+Links |
+
https://securityblog.switch.ch/2015/06/18/so-long-and-thanks-for-all-the-domains/ |
+
http://securityintelligence.com/tinba-malware-reloaded-and-attacking-banks-around-the-world/ |
+
https://blog.avast.com/2014/09/15/tiny-banker-trojan-targets-customers-of-major-banks-worldwide/ |
+
| + |
Geodo is a banking trojan delivered primarily through malspam emails. It is capable of sniffing network activity to steal information by hooking certain network API calls.
+Geodo is also known as:
+Feodo Version C
+Emotet
+Links |
+
| + |
| + |
Feodo is a banking trojan that utilizes web injects and is also capable of monitoring & manipulating cookies. Version A = Port 8080, Version B = Port 80 It is delivered primarily via exploit kits and malspam emails.
+Feodo is also known as:
+Bugat
+Cridex
+Links |
+
| + |
| + |
http://stopmalvertising.com/rootkits/analysis-of-cridex.html |
+
Originally not a banking trojan in 2010, Ramnit became a banking trojan after the Zeus source code leak. It is capable of perforrming Man-in-the-Browser attacks. Distributed primarily via exploit kits.
+Ramnit is also known as:
+Nimnul
+Links |
+
https://www.cert.pl/en/news/single/ramnit-in-depth-analysis/ |
+
Qakbot is a banking trojan that leverages webinjects to steal banking information from victims. It also utilizes DGA for command and control. It is primarily delivered via exploit kits.
+Qakbot is also known as:
+Qbot
+Pinkslipbot
+Links |
+
https://securityintelligence.com/qakbot-banking-trojan-causes-massive-active-directory-lockouts/ |
+
| + |
https://www.virusbulletin.com/uploads/pdf/magazine/2016/VB2016-Karve-etal.pdf |
+
Corebot is a modular trojan that leverages a banking module that can perform browser hooking, form grabbing, MitM, webinjection to steal financial information from victims. Distributed primarily via malspam emails and exploit kits.
+Links |
+
| + |
| + |
https://malwarebreakdown.com/2017/09/11/re-details-malspam-downloads-corebot-banking-trojan/ |
+
TinyNuke is a modular banking trojan that includes a HiddenDesktop/VNC server and reverse SOCKS 4 server. It’s main functionality is to make web injections into specific pages to steal user data. Distributed primarily via malspam emails and exploit kits.
+TinyNuke is also known as:
+NukeBot
+Nuclear Bot
+MicroBankingTrojan
+Xbot
+Retefe is a banking trojan that is distributed by what SWITCH CERT calls the Retefe gang or Operation Emmental. It uses geolocation based targeting. It also leverages fake root certificate and changes the DNS server for domain name resolution in order to display fake banking websites to victims. It is spread primarily through malspam emails.
+Retefe is also known as:
+Tsukuba
+Werdlod
+Links |
+
| + |
https://threatpost.com/eternalblue-exploit-used-in-retefe-banking-trojan-campaign/128103/ |
+
https://countuponsecurity.com/2016/02/29/retefe-banking-trojan/ |
+
https://securityblog.switch.ch/2014/11/05/retefe-with-a-new-twist/ |
+
http://securityintelligence.com/tsukuba-banking-trojan-phishing-in-japanese-waters/ |
+
ReactorBot is sometimes mistakenly tagged as Rovnix. ReactorBot is a full fledged modular bot that includes a banking module that has roots with the Carberp banking trojan. Distributed primarily via malspam emails.
+Links |
+
http://www.malwaredigger.com/2015/06/rovnix-payload-and-plugin-analysis.html |
+
https://www.symantec.com/connect/blogs/new-carberp-variant-heads-down-under |
+
http://www.malwaredigger.com/2015/05/rovnix-dropper-analysis.html |
+
| + |
Matrix Banker is named accordingly because of the Matrix reference in it’s C2 panel. Distributed primarily via malspam emails.
+Links |
+
https://www.arbornetworks.com/blog/asert/another-banker-enters-matrix/ |
+
Zeus Gameover captures banking credentials from infected computers, then use those credentials to initiate or re-direct wire transfers to accounts overseas that are controlled by the criminals. GameOver has a decentralized, peer-to-peer command and control infrastructure rather than centralized points of origin. Distributed primarily via malspam emails and exploit kits.
+Links |
+
| + |
| + |
SpyEye is a similar to the Zeus botnet banking trojan. It utilizes a web control panel for C2 and can perform form grabbing, autofill credit card modules, ftp grabber, pop3 grabber and HTTP basic access authorization grabber. It also contained a Kill Zeus feature which would remove any Zeus infections if SpyEye was on the system. Distributed primarily via exploit kits and malspam emails.
+Links |
+
https://www.ioactive.com/pdfs/ZeusSpyEyeBankingTrojanAnalysis.pdf |
+
| + |
https://www.symantec.com/connect/blogs/spyeye-bot-versus-zeus-bot |
+
Citadel is an offspring of the Zeus banking trojan. Delivered primarily via exploit kits.
+Links |
+
https://blog.malwarebytes.com/threat-analysis/2012/11/citadel-a-cyber-criminals-ultimate-weapon/ |
+
| + |
| + |
Atmos is derived from the Citadel banking trojan. Delivered primarily via exploit kits and malspam emails.
+Links |
+
https://heimdalsecurity.com/blog/security-alert-citadel-trojan-resurfaces-atmos-zeus-legacy/ |
+
| + |
Ice IX is a bot created using the source code of ZeuS 2.0.8.9. No major improvements compared to ZeuS 2.0.8.9.
+Links |
+
https://securelist.com/ice-ix-not-cool-at-all/29111/ [https://securelist.com/ice-ix-not-cool-at-all/29111/ ] |
+
Zeus in the mobile. Banking trojan developed for mobile devices such as Windows Mobile, Blackberry and Android.
+Links |
+
https://securelist.com/zeus-in-the-mobile-for-android-10/29258/ |
+
Banking trojan based on Zeus V2. Murofet is a newer version of Licat found ~end of 2011
+Licat is also known as:
+Murofet
+Links |
+
https://johannesbader.ch/2015/09/three-variants-of-murofets-dga/ |
+
https://www.trendmicro.com/vinfo/us/threat-encyclopedia/malware/PE_LICAT.A |
+
| + |
Skynet is a Tor-powered trojan with DDoS, Bitcoin mining and Banking capabilities. Spread via USENET as per rapid7.
+Links |
+
https://blog.rapid7.com/2012/12/06/skynet-a-tor-powered-botnet-straight-from-reddit/ |
+
PROMETHIUM is an activity group that has been active as early as 2012. The group primarily uses Truvasys, a first-stage malware that has been in circulation for several years. Truvasys has been involved in several attack campaigns, where it has masqueraded as one of server common computer utilities, including WinUtils, TrueCrypt, WinRAR, or SanDisk. In each of the campaigns, Truvasys malware evolved with additional features—this shows a close relationship between the activity groups behind the campaigns and the developers of the malware.
