PULSE NAME
BadBazaar espionage tool targets Android users via trojanized Signal and Telegram apps
WHITE GREF AlienVault 2023-08-31 Modified: 2023-10-03
19
IOCs
MEDIUM VOLUME
Research has identified two campaigns targeting Android users via trojanized Signal and Telegram apps and a malware family that has previously been used to target Uyghurs and other Turkic ethnic minorities.
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
FlyGram Uyghur Telegram OS X GREF Android BadBazaar
Indicators of Compromise (1 / 19 total)
All FileHash-MD5 FileHash-SHA1 FileHash-SHA256 domain hostname
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 ef271686f134be63277ce471a5181ee9 MD5 of e368db837edf340e47e85652d6159d6e90725b0d 2023-08-31