← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Crypto malware in patched wallets targeting Android and iOS devices | WeLiveSecurity
ESET Research has uncovered a sophisticated scheme that distributes trojanized Android and iOS apps posing as cryptocurrency wallets, which it believes could be used to steal users’ funds. and is mainly targeting Chinese users.
MITRE ATT&CK & Malware Families
Indicators of Compromise (19 / 190 total)
| TYPE | INDICATOR | DESCRIPTION | CREATED | |
|---|---|---|---|---|
| hostname | admin.metamaskio.vip | — | 2022-03-25 | |
| hostname | admin.token2.club | — | 2022-03-25 | |
| hostname | api.metamasks.me | — | 2022-03-25 | |
| hostname | api.tipi21341.com | — | 2022-03-25 | |
| hostname | appapi.imtoken.porn | — | 2022-03-25 | |
| hostname | bh.imtoken.sx | — | 2022-03-25 | |
| hostname | bp.tkdt.cc | — | 2022-03-25 | |
| hostname | crp.jaxwalet.com | — | 2022-03-25 | |
| hostname | ds-super-admin.imtokens.money | — | 2022-03-25 | |
| hostname | imtokenss.token-app.cc | — | 2022-03-25 | |
| hostname | jaxx.libertycryptowallet.ltd | — | 2022-03-25 | |
| hostname | jaxx.podzone.org | — | 2022-03-25 | |
| hostname | metamask.tptokenm.live | — | 2022-03-25 | |
| hostname | mm.tkdt.cc | — | 2022-03-25 | |
| hostname | ok.tkdt.cc | — | 2022-03-25 | |
| hostname | two.shayu.la | — | 2022-03-25 | |
| hostname | update.imdt.cc | — | 2022-03-25 | |
| hostname | update.xzxqsf.com | — | 2022-03-25 | |
| hostname | wallet.cryptojx.store | — | 2022-03-25 |