A ScarePakage variant is targeting more countries : impersonating Europol and AFP
Revision as of 22:31, 31 July 2015 by Eric.freyssinet (talk | contribs) (Text replacement - "Campaign1=" to "Campaign=")
The printable version is no longer supported and may have rendering errors. Please update your browser bookmarks and please use the default browser print function instead.
(Publication) Google search: [1]
A ScarePakage variant is targeting more countries : impersonating Europol and AFP | |
---|---|
Botnet | ScarePakage |
Malware | |
Botnet/malware group | |
Exploit kits | |
Services | |
Feature | |
Distribution vector | |
Target | |
Origin | |
Campaign | |
Operation/Working group | |
Vulnerability | |
CCProtocol | |
Date | 2014 / 2014-08-06 |
Editor/Conference | Kafeine |
Link | http://malware.dontneedcoffee.com/2014/08/scarepackageknstant.html (Archive copy) |
Author | Kafeine |
Type | Blogpost |
Abstract
“ On July 16th Lookout wrote about a new "police ransomware" on Android. They named it ScarePakage. (aliases : Eset:Android/Locker.B , Kaspersky:Trojan-Ransom.AndroidOS.Aples.a)
It (or a variant ? seems Norton focused here) is advertised on underground since beginning of July as "Android Locker" by the seller of a fork of Titan Browlock System.
Bibtex
@misc{Lua error: Cannot create process: proc_open(/dev/null): failed to open stream: Operation not permitted2014BFR1402, editor = {Kafeine}, author = {Kafeine}, title = {A ScarePakage variant is targeting more countries : impersonating Europol and AFP}, date = {06}, month = Aug, year = {2014}, howpublished = {\url{http://malware.dontneedcoffee.com/2014/08/scarepackageknstant.html}}, }