S0478 EventBot

malwareMobile

platformsAndroid

also known asEventBot

EventBot is an Android banking trojan and information stealer that abuses Android’s accessibility service to steal data from various applications. EventBot was designed to target over 200 different banking and financial applications, the majority of which are European bank and cryptocurrency exchange applications.

techniques used (14)

ATT&CK techniques this enables or maps to.

T1406Obfuscated Files or Information
T1407Download New Code at Runtime
T1417.001Keylogging
T1417.002GUI Input Capture
T1418Software Discovery
T1422System Network Configuration Discovery
T1422.001Internet Connection Discovery
T1426System Information Discovery
T1437.001Web Protocols
T1513Screen Capture
T1521.001Symmetric Cryptography
T1624.001Broadcast Receivers
T1636.004SMS Messages
T1655.001Match Legitimate Name or Location

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan