IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure
TLP:WHITE2 IOCs

Necro Trojan’s Return: Infiltrating Google Play to Target Android Users

SB
Secure Blink
Published September 25, 2024Original Report

Malware Families

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTUREspotiplus.xyzbearsplay.comCAPABILITYPlayVICTIMunknown
Adversary
Infrastructure(2)
Capability(1)
Victim

Indicators of Compromise

Indicators of Compromise2

TypeIndicatorConfidenceScoreFirst Seen
Domainspotiplus.xyz
intel-blogmalwarenetwork
High
58
Oct 9, 26
Domainbearsplay.com
intel-blogmalwarenetwork
High
58
Oct 9, 26

IOC Relationship Graph

IOC Relationship Graph2 total IOCs
Domain
Domain2Malware1REPORTNecro Trojan’s Return: InfPlay
scroll to zoom · drag to pan · click IOC to open