The same here Re-ind

play.google.com/store/apps/det…

it's a good idea to keep an 🧐 on host:'fuion.co' thx APKLAB.io

#Trojan #Joker #Android #Spyware Google Play Re-ind

play.google.com/store/apps/det…

CFFC81E6329B069D9E5C2C7DF002DEB5F6D9EB49276EA632EBB546C3224FF5D3

/weco2.oss-me-east-1.aliyuncs.com/1117
/weco2.oss-me-east-1.aliyuncs.com/dfinery
/weco2.oss-me-east-1.aliyuncs.com/futon

ceb7f2a6128d9878c2d35712b7b5560ea1a51137ec8f2a6443a346131b166d64

⚡️There is another malicious #Android application that is currently live in the #GooglePlay Store disguised as a PDF reader that downloads the #Coper banking trojan from #GitHub .

IOCs are available here: github.com/threatlabz/ioc…

101 apps on Google Play with at least 421,290,300 downloads contain а marketing SDK detected as Android.Spy.SpinOk.
news.drweb.com/show/?lng=en&i…

IoCs: github.com/DoctorWebLtd/m…

/adjer.wang/Bostper
/sgp1.vultrobjects.com/000/smiple_4yue
/sgp1.vultrobjects.com/000/dex_84
/sgp1.vultrobjects.com/000/futon

3 additional apks

#Joker #Android #Spyware Google Play Re-ind

play.google.com/store/apps/det…

5a6ced2b3c2190370ca1920224eb5cd7b5a685d7d023e3cba43e0f5d0cc5773a

/firega.shop

We detected more #Malicious #Joker #apps on
Google Play Google PlayBiz

Harly on Google play
With 100+downloads
play.google.com/store/apps/det…
App Name - Easy Translate

#Trojan #Malware #Joker #playstore #cybersecurity #ThreatHunting #infosec #Android

New #Harly Android #Trojan on Google Play:
play.google.com/store/apps/det…
Apr 3, 1,000+ installs
C2: uhh.toponsu[.]com

#Telegrambot ? 🧐🤔
/telegra.ph/MBNKNG-data-server-03-13
interesting xml in resources /kid/data.xml

Yes,Yes,Yes, Please turn me on😜

#Harly #Android #Spyware Google Play
Re-ind (nice with 50000 downloads)

0fa9846e52e9b0614247c562add77b2f353e510fec6fdc5da610b4949fefc3d0

/dop.opmknbf.com

play.google.com/store/apps/det…

#Harly #Android #Spyware Google Play
Re-ind

play.google.com/store/apps/det…

4a3a2db0d78201ab3c6e49c37bcf308a6409e2f162541934f90f78729d5c73c9

/dop.opmknbf.com

114503f4ad18832eea40c24f4a4208f029192d4495db278bae5fe198521b2e1e
c5fc56083b6a54889f01b78423e5d7ae11d7fee332de63fbd2559e749f14a444

Not so much detected 😭

b8912538ab7cdc1aa576595405816ef65370e06b795b70a84499e5e067b94c2f

e9f6777f2a2ed1c64abce4ca65cac359e1b47249585a031331d5c245ad9552a2

⚠️ New fraud campaign alert ⚠️
Our Threat Intelligence team has discovered that Vultur is being distributed through a malicious app promoted via Google Ads. #bankingtrojan #Vultur #Brunhilda #malware

EDD6030456577EF5848F7A1634BBDD3DD6B2ACA666D8124CE5EC37DBA0AC9447

/dop.opmknbf.com

630432f4c7af644638ec7f4916394f08032e33368134dde88eda449557dadd07

/lihi2.cc
/maybethreislvd.oss-ap-northeast-2.aliyuncs.com
/adcbk.oss-eu-central-1.aliyuncs.com

/fgd45gf.shorlturl.shop ...
/acidlylink-1301476296.cos.ap-mumbai.myqcloud.com/fasa

d2565a677b115f20dfb862dc2d416b1734e2188e9bcc05c6b44beebe3f3240fb