S1067 FluBot

malwareMobile

platformsAndroid

also known asFluBot

FluBot is a multi-purpose mobile banking malware that was first observed in Spain in late 2020. It primarily spread through European countries using a variety of SMS phishing messages in multiple languages. An international law enforcement operation of 11 countries eventually disrupted the spread of FluBot.

techniques used (17)

ATT&CK techniques this enables or maps to.

T1406Obfuscated Files or Information
T1409Stored Application Data
T1417.002GUI Input Capture
T1437.001Web Protocols
T1453Abuse Accessibility Features
T1517Access Notifications
T1521.002Asymmetric Cryptography
T1582SMS Control
T1604Proxy Through Victim
T1628.002User Evasion
T1629.001Prevent Application Removal
T1629.003Disable or Modify Tools
T1636.003Contact List
T1636.004SMS Messages
T1637.001Domain Generation Algorithms
T1646Exfiltration Over C2 Channel
T1660Phishing

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan