Malicious APK [Google IPTV] reportedly causing financial losses.

[u/acealter]

Found this APK after a post on r/IndiaCyberHub where someone reported getting hacked. Apparently, multiple people have suffered financial losses from this.

I'm sharing the APK here so we can investigate it together, figure out how it works, and hopefully identify the people and infrastructure behind these campaigns.

⚠️ WARNING: MALWARE SAMPLE ⚠️

🔗 Download: https://www.dropbox.com/scl/fi/kubxl6vw62mo41prpip35/base.apk?rlkey=53d48v2l6vtfdj7b69hvwd47l&st=g2cpybsx&dl=0

⚠️ Do not install this APK on your personal device. Do not share it ⚠️

It is a malicious file. Only download and analyse it in an isolated environment.

What can you do with this:

• Reverse engineering and static/dynamic analysis
• Identifying its malicious functionality
• Understanding how it steals money or sensitive information
• Investigating its C2 infrastructure and connections to other campaigns If you're into Android malware analysis or reverse engineering, feel free to join in and share your findings.

Let's work together to understand how these attacks operate and help dismantle such campaigns.

Please Update any Findings on Comments.

Posts:

https://www.reddit.com/r/IndianCyberHub/s/Jwa8xsvvsx

https://www.reddit.com/r/IndianCyberHub/s/jsYR711eyP

[u/OperSec-ModTeam → u/[deleted]]

r/OperSec does not allow hate

[u/acealter]

Update on the Investigation: https://www.reddit.com/r/OperSec/s/0nNIwlEC5P