Tagged

#malware

02 ENTRIES

• writeupMar 7, 20263 min read

  Static Analysis of a Fake Pos Indonesia APK: an SMS-to-Telegram OTP Forwarding Trojan

  Static analysis of an Android APK impersonating PT Pos Indonesia. MobSF and JADX reveal an SMS interceptor that forwards incoming messages to a hardcoded Telegram bot, sends SMS on command, and stores data for retry, a classic OTP forwarding trojan.

• articleFeb 17, 20265 min read

  Fake CAPTCHA to Data Theft: A Lumma Stealer Campaign Through the Cyber Kill Chain

  How attackers weaponize fake CAPTCHA pages to deploy the Lumma Stealer infostealer, mapped stage by stage onto the Cyber Kill Chain, from reconnaissance to data theft.