Mallory pivots from this family to the IOCs, detections, and named campaigns that touch your stack, and pages you when something new lands.
1 distinct threat actor attributed by public researchers. Open in Mallory to see the full evidence chain and overlapping campaigns.
Introduction AntiDot is an Android botnet malware that lets cybercriminals control their victim devices with high capability.
4 distinct techniques documented for this family, organized by ATT&CK tactic.
25 indicators attributed across vendor reports, sandbox runs, and researcher write-ups. Full values are available in Mallory.
IPs, domains, and DNS infrastructure linked to this family.
File hashes (MD5, SHA-1, SHA-256) from samples and reports.
Other indicator types observed in public reporting.
3 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Mobile banking trojan distributed via a recruiter-themed phishing (mishing) campaign using malicious apps.
Multi-stage Android botnet malware sold as a malware-as-a-service offering. It uses a loader and packer, abuses Android accessibility services, performs overlay and WebView phishing, steals credentials including Google account data, intercepts SMS, monitors calls and notifications, harvests app logs, and enables real-time remote control of infected devices through a capable C2 panel.
Android banking trojan that masquerades as a Google Play update app and uses overlay attacks, keylogging, WebSocket-based C2, VNC via MediaProjection, SMS theft, USSD requests, call forwarding, contact collection, screen capture, camera access, and device lock/unlock capabilities to compromise devices and steal sensitive information.
Match every observed IP, domain, and hash against your live telemetry.
Named campaigns wielding this family, with evidence pinned to each claim.
CVEs this family uses for access and lateral movement.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Every documented technique, ranked by evidence weight.
Reddit, Mastodon, and CTI community discussion around this family.