S1055 SharkBot

malwareMobile

platformsAndroid

also known asSharkBot

SharkBot is a banking malware, first discovered in October 2021, that tries to initiate money transfers directly from compromised devices by abusing Accessibility Services.

techniques used (18)

ATT&CK techniques this enables or maps to.

T1406Obfuscated Files or Information
T1407Download New Code at Runtime
T1417.001Keylogging
T1417.002GUI Input Capture
T1424Process Discovery
T1437.001Web Protocols
T1516Input Injection
T1517Access Notifications
T1521.001Symmetric Cryptography
T1521.002Asymmetric Cryptography
T1544Ingress Tool Transfer
T1582SMS Control
T1630.001Uninstall Malicious Application
T1636.004SMS Messages
T1637.001Domain Generation Algorithms
T1644Out of Band Data
T1646Exfiltration Over C2 Channel
T1661Application Versioning

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan