Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
5 IOCs
Glitch SPY: An Emerging Android RAT Distributed Through a Fake Polish Rental App
Threat Actors
Malware Families
Excerpt
Executive Summary Cyble Research and Intelligence Labs identified an emerging Android malware family tracked as Glitch SPY , distributed through a fraudulent Polish apartment and house rental platform designed to lure users into downloading an Android APK. Based on the Polish-language lure and rental-themed distribution website, the activity appears to be Poland-focused, targeting users in Poland or Polish expats. The downloaded application functions as a dropper and installs…
Read the original report →Diamond Model
Adversary(2)
Infrastructure(3)
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →5 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | 80af5e921cf8a3052fe4483bb2eb15953590e72ed003ac61c0b9135575c32075 | Medium | Score 53/100 | First seen |
| SHA256 | d439475bf09af7b474cdba2c19e136a1dd38e62b088537445ac3c8e4c2d3a8b1 | Medium | Score 53/100 | First seen |
| Domain | sportypointsrewards.com | High | Score 58/100 | First seen |
| Domain | gich.etherraffleexchange.us | High | Score 58/100 | First seen |
| URL | https://tutaj-dompl.com/Tutajdom.apk | High | Score 58/100 | First seen |
IOC Relationship Graph
Building graph…