2022-05-19 Scam and Malicious APK targeting Malaysian MyMaidKL Technical Analysis

📃Title: Scam and Malicious APK targeting Malaysian: MyMaidKL Technical Analysis
📅Date: 2022-05-19
🔗References:

• https://notes.netbytesec.com/2022/05/scam-and-malicious-apk-targeting.html

🔖Rectifyq Taxonomies:

• relevancy: 🔴 Highly Relevant
• category: ⚔Threat
• sub-category: malware-analysis
• target: targeted
• MY-relevancy: relevant

🔖MISP Galaxies:

• target-information=“Malaysia”
• financial-fraud=“Fake Website”
• financial-fraud=“Fake App”
• mitre-attack-pattern=[‘T1476’, ‘T1412’]

MISP event uuid: e85ae419-f9ec-48a0-bf9a-152a270c55f6

Indicator of Compromise (IoCs)

type,value,comment
url, https://api.lapubo.com, ''
url, https://mymaidkl.com, ''
url, https://mobile666.mymaidkl.com, ''

Full IOCs available in Rectifyq's MISP```