A ScarePakage variant is targeting more countries : impersonating Europol and AFP
Jump to navigation
Jump to search
The printable version is no longer supported and may have rendering errors. Please update your browser bookmarks and please use the default browser print function instead.
(Publication) Google search: [1]
A ScarePakage variant is targeting more countries : impersonating Europol and AFP | |
---|---|
Botnet | ScarePakage |
Malware | |
Botnet/malware group | |
Exploit kits | |
Services | |
Feature | |
Distribution vector | |
Target | |
Origin | |
Campaign | |
Operation/Working group | |
Vulnerability | |
CCProtocol | |
Date | 2014 / 2014-08-06 |
Editor/Conference | Kafeine |
Link | http://malware.dontneedcoffee.com/2014/08/scarepackageknstant.html (Archive copy) |
Author | Kafeine |
Type | Blogpost |
Abstract
“ On July 16th Lookout wrote about a new "police ransomware" on Android. They named it ScarePakage. (aliases : Eset:Android/Locker.B , Kaspersky:Trojan-Ransom.AndroidOS.Aples.a)
It (or a variant ? seems Norton focused here) is advertised on underground since beginning of July as "Android Locker" by the seller of a fork of Titan Browlock System.
Bibtex
@misc{Lua error: Cannot create process: proc_open(/dev/null): failed to open stream: Operation not permitted2014BFR1402, editor = {Kafeine}, author = {Kafeine}, title = {A ScarePakage variant is targeting more countries : impersonating Europol and AFP}, date = {06}, month = Aug, year = {2014}, howpublished = {\url{http://malware.dontneedcoffee.com/2014/08/scarepackageknstant.html}}, }