ctrlINT What the industry said about every indicator, with the quote

ERMACMalware

According to Intel471, ERMAC, an Android banking trojan enables bad actors to determine when certain apps are launched and then overwrites the screen display to steal the user's credentialsFrom MISP Galaxy

Last reported 1 month ago, by Risky Business News1 report

Reports per month

last 12 months

October so far (hatched). Counted by report, not by story.

What the reports say

1 report, newest first · the exact sentence from each

  1. “ERMAC to HookBot: Censys researchers have published a report on the evolution of how the HookBot Android banking trojan has evolved from the leak source code of the ERMAC strain, which itself is an evolution from Cerberus.”

    Risky Business NewsNews
    Risky Bulletin: Russia starts blocking DoH and DoT

Indicators in its reports

named in the reports above
Copy this indicator · defanged

Thanks — we review every report.

Report a wrong match
What is wrong with ERMAC here?
No account needed. We do not store your IP address.