Unveiling Maorrisbot: The Inner Workings of an Android Trojan Malware

16 Pages

CloudSEK's analysis of the Maorrisbot Android Trojan reveals that threat actors distribute this malware through fake challan messages on WhatsApp. Once installed, it steals contacts, SMS messages, and device data, forwarding them to attackers via a Telegram bot. The malware, part of the Wromba family, employs anti-analysis techniques to evade detection. CloudSEK successfully extracted the Telegram bot token used by the attackers, highlighting the sophisticated methods used to harvest sensitive information across the Asia-Pacific region.

Join for free to read

Case Study East Irondequoit CSD claims victory over Emotet Trojan

White Paper Understanding ICS Malware: Defining a Credible Threat to…

White Paper 10 Strategies for Android mPoS Security

White Paper State of Malware Analysis

More from CloudSEK

White Paper Unveiling the Exploitation of Missing "X-Frame-Options" HTTP…

White Paper Hacktivist Warfare: Assessing the Strategies and Tools of Cyber…

Report Brazil - Latin America (LATAM) Cyber Threat Landscape 2023-24

White Paper Beyond the Storefront: E-commerce and Retail Threat Insights

White Paper

Unveiling Maorrisbot: The Inner Workings of an Android Trojan Malware

Unveiling Maorrisbot: The Inner Workings of an Android Trojan Malware

You Might Also Like

More from CloudSEK