2017-12-18 MA-690.122017 MyCERT Alert - Fake PDRM Malicious APK

📃Title: MA-690.122017: MyCERT Alert - Fake PDRM Malicious APK
📅Date: 2017-12-18
🔗References:

• https://www.mycert.org.my/portal/advisory?id=MA-690.122017

🔖Rectifyq Taxonomies:

• relevancy: 🔴 Highly Relevant
• category: ⚔Threat
• sub-category: malware-analysis
• target: targeted
• MY-relevancy: relevant

🔖MISP Galaxies:

• target-information=“Malaysia”
• sector=“Police - Law enforcement”
• f3b46834-6ce9-44ef-852d-d7ac61a12920=“00afde8d-6de3-46b1-9f35-e98fc8c1ee07”
• financial-fraud=“Fake App”
• financial-fraud=“Fake Website”
• producer 4a61b42d-e3f0-4964-9d88-4aa96e24c31d
• mitre-attack-pattern=[‘T1412’, ‘T1582’]

MISP event uuid: dd295f39-d156-45a9-8d41-6c505b1f094e

Indicator of Compromise (IoCs)

type,value,comment

Full IOCs available in Rectifyq's MISP```