Trusted Design

First Twitter-controlled Android botnet discovered

概要

Android/Twitoor is a backdoor capable of downloading other malware onto an infected device. It has been active for around one month. This malicious app, a variant of Android/Twitoor.A, can’t be found on any official Android app store – it probably spreads by SMS or via malicious URLs. It impersonates a porn player app or MMS application but without having their functionality. After launching, it hides its presence on the system and checks the defined Twitter account at regular intervals for commands. Based on received commands, it can either download malicious apps or switch the C&C Twitter account to another one.

Created: 2026-02-23

Indicators

類似Pulses

IBM Trusteer: Mazain Mobile Bot Sees Increasing Prevalence in France and Spain (score: 0.62)
More on Android Trojan spying on Iranian users controlled via Telegram (score: 0.60)
THL: Malicious Site (score: 0.60)
ZBot Malware (score: 0.59)
Spyware targets Iranian Android users by abusing messaging app Telegram’s Bot API (score: 0.57)

このPulseに関連する脅威アクター (事実ベース)

APT41

Score: 9.21

Matched TTPs:

T1069 - Permission Groups Discovery
T1071.001 - Web Protocols
T1003.003 - NTDS
T1569.002 - Service Execution

MITREへのリンク →

Scattered Spider

Score: 5.63

Matched TTPs:

T1069 - Permission Groups Discovery
T1003.003 - NTDS

MITREへのリンク →

TA505

Score: 6.45

Matched TTPs:

T1069 - Permission Groups Discovery
T1608.001 - Upload Malware
T1071.001 - Web Protocols

MITREへのリンク →

Volt Typhoon

Score: 9.25

Matched TTPs:

T1069 - Permission Groups Discovery
T1584.005 - Botnet
T1003.003 - NTDS

MITREへのリンク →

APT3

Score: 6.91

Matched TTPs:

T1069 - Permission Groups Discovery
T1036.010 - Masquerade Account Name

MITREへのリンク →

FIN13

Score: 6.81

Matched TTPs:

T1069 - Permission Groups Discovery
T1071.001 - Web Protocols
T1003.003 - NTDS

MITREへのリンク →

Sandworm Team

Score: 15.65

Matched TTPs:

T1586.001 - Social Media Accounts
T1608.001 - Upload Malware
T1584.005 - Botnet
T1102.002 - Bidirectional Communication
T1071.001 - Web Protocols
T1003.003 - NTDS

MITREへのリンク →

Leviathan

Score: 8.26

Matched TTPs:

T1586.001 - Social Media Accounts
T1102.003 - One-Way Communication

MITREへのリンク →

HAFNIUM

Score: 11.00

Matched TTPs:

T1583.005 - Botnet
T1584.005 - Botnet
T1071.001 - Web Protocols
T1003.003 - NTDS

MITREへのリンク →

APT5

Score: 3.84

Matched TTPs:

T1583.005 - Botnet

MITREへのリンク →

Ke3chang

Score: 9.77

Matched TTPs:

T1583.005 - Botnet
T1071.001 - Web Protocols
T1003.003 - NTDS
T1569.002 - Service Execution

MITREへのリンク →

Earth Lusca

Score: 5.59

Matched TTPs:

T1608.001 - Upload Malware
T1584.006 - Web Services

MITREへのリンク →

Mustang Panda

Score: 18.02

Matched TTPs:

T1608.001 - Upload Malware
T1001.003 - Protocol or Service Impersonation
T1071.001 - Web Protocols
T1622 - Debugger Evasion
T1027.007 - Dynamic API Resolution
T1003.003 - NTDS

MITREへのリンク →

LuminousMoth

Score: 3.16

Matched TTPs:

T1608.001 - Upload Malware
T1071.001 - Web Protocols

MITREへのリンク →

Kimsuky

Score: 13.13

Matched TTPs:

T1608.001 - Upload Malware
T1564.002 - Hidden Users
T1102.002 - Bidirectional Communication
T1585 - Establish Accounts
T1071.001 - Web Protocols

MITREへのリンク →

OilRig

Score: 3.16

Matched TTPs:

T1608.001 - Upload Malware
T1071.001 - Web Protocols

MITREへのリンク →

TeamTNT

Score: 3.16

Matched TTPs:

T1608.001 - Upload Malware
T1071.001 - Web Protocols

MITREへのリンク →

Gamaredon Group

Score: 9.69

Matched TTPs:

T1608.001 - Upload Malware
T1102.003 - One-Way Communication
T1102.002 - Bidirectional Communication
T1071.001 - Web Protocols

MITREへのリンク →

Threat Group-3390

Score: 3.16

Matched TTPs:

T1608.001 - Upload Malware
T1071.001 - Web Protocols

MITREへのリンク →

BlackByte

Score: 5.56

Matched TTPs:

T1608.001 - Upload Malware
T1071.001 - Web Protocols
T1569.002 - Service Execution

MITREへのリンク →

BITTER

Score: 3.16

Matched TTPs:

T1608.001 - Upload Malware
T1071.001 - Web Protocols

MITREへのリンク →

APT32

Score: 5.56

Matched TTPs:

T1608.001 - Upload Malware
T1071.001 - Web Protocols
T1569.002 - Service Execution

MITREへのリンク →

HEXANE

Score: 4.37

Matched TTPs:

T1608.001 - Upload Malware
T1102.002 - Bidirectional Communication

MITREへのリンク →

Moonstone Sleet

Score: 5.56

Matched TTPs:

T1608.001 - Upload Malware
T1071.001 - Web Protocols
T1569.002 - Service Execution

MITREへのリンク →

Contagious Interview

Score: 5.41

Matched TTPs:

T1608.001 - Upload Malware
T1585 - Establish Accounts

MITREへのリンク →

FIN7

Score: 6.77

Matched TTPs:

T1608.001 - Upload Malware
T1102.002 - Bidirectional Communication
T1569.002 - Service Execution

MITREへのリンク →

APT42

Score: 3.16

Matched TTPs:

T1608.001 - Upload Malware
T1071.001 - Web Protocols

MITREへのリンク →

Axiom

Score: 8.16

Matched TTPs:

T1584.005 - Botnet
T1001.002 - Steganography

MITREへのリンク →

Dragonfly

Score: 10.09

Matched TTPs:

T1564.002 - Hidden Users
T1036.010 - Masquerade Account Name
T1003.003 - NTDS

MITREへのリンク →

Lazarus Group

Score: 19.72

Matched TTPs:

T1574.013 - KernelCallbackTable
T1102.002 - Bidirectional Communication
T1001.003 - Protocol or Service Impersonation
T1071.001 - Web Protocols
T1027.007 - Dynamic API Resolution
T1529 - System Shutdown/Reboot

MITREへのリンク →

Turla

Score: 7.21

Matched TTPs:

T1584.006 - Web Services
T1102.002 - Bidirectional Communication
T1071.001 - Web Protocols

MITREへのリンク →

CURIUM

Score: 3.62

Matched TTPs:

T1584.006 - Web Services

MITREへのリンク →

Winter Vivern

Score: 4.81

Matched TTPs:

T1584.006 - Web Services
T1071.001 - Web Protocols

MITREへのリンク →

APT37

Score: 7.21

Matched TTPs:

T1102.002 - Bidirectional Communication
T1071.001 - Web Protocols
T1529 - System Shutdown/Reboot

MITREへのリンク →

APT39

Score: 5.98

Matched TTPs:

T1102.002 - Bidirectional Communication
T1071.001 - Web Protocols
T1569.002 - Service Execution

MITREへのリンク →

Magic Hound

Score: 7.21

Matched TTPs:

T1102.002 - Bidirectional Communication
T1036.010 - Masquerade Account Name
T1071.001 - Web Protocols

MITREへのリンク →

APT28

Score: 5.93

Matched TTPs:

T1102.002 - Bidirectional Communication
T1071.001 - Web Protocols
T1003.003 - NTDS

MITREへのリンク →

MuddyWater

Score: 3.59

Matched TTPs:

T1102.002 - Bidirectional Communication
T1071.001 - Web Protocols

MITREへのリンク →

Higaisa

Score: 5.03

Matched TTPs:

T1001.003 - Protocol or Service Impersonation
T1071.001 - Web Protocols

MITREへのリンク →

Fox Kitten

Score: 5.78

Matched TTPs:

T1585 - Establish Accounts
T1003.003 - NTDS

MITREへのリンク →

Ember Bear

Score: 3.44

Matched TTPs:

T1585 - Establish Accounts

MITREへのリンク →

APT17

Score: 3.44

Matched TTPs:

T1585 - Establish Accounts

MITREへのリンク →

Storm-1811

Score: 3.62

Matched TTPs:

T1036.010 - Masquerade Account Name

MITREへのリンク →

Chimera

Score: 5.93

Matched TTPs:

T1071.001 - Web Protocols
T1003.003 - NTDS
T1569.002 - Service Execution

MITREへのリンク →

Medusa Group

Score: 14.09

Matched TTPs:

T1071.001 - Web Protocols
T1003.003 - NTDS
T1569.002 - Service Execution
T1529 - System Shutdown/Reboot
T1218.014 - MMC

MITREへのリンク →

APT38

Score: 7.21

Matched TTPs:

T1071.001 - Web Protocols
T1569.002 - Service Execution
T1529 - System Shutdown/Reboot

MITREへのリンク →

Wizard Spider

Score: 5.93

Matched TTPs:

T1071.001 - Web Protocols
T1003.003 - NTDS
T1569.002 - Service Execution

MITREへのリンク →

FIN6

Score: 4.74

Matched TTPs:

T1003.003 - NTDS
T1569.002 - Service Execution

MITREへのリンク →

このPulseに関連する脅威アクター (推論ベース)

Lazarus Group

Score: 0.78

Matched TTPs:

T1071.001 - Web Protocols
T1027.007 - Dynamic API Resolution
T1001.003 - Protocol or Service Impersonation
T1529 - System Shutdown/Reboot
T1102.002 - Bidirectional Communication
T1574.013 - KernelCallbackTable

MITREへのリンク →

Mustang Panda

Score: 0.70

Matched TTPs:

T1071.001 - Web Protocols
T1027.007 - Dynamic API Resolution
T1608.001 - Upload Malware
T1001.003 - Protocol or Service Impersonation
T1003.003 - NTDS
T1622 - Debugger Evasion

MITREへのリンク →

Sandworm Team

Score: 0.63

Matched TTPs:

T1071.001 - Web Protocols
T1608.001 - Upload Malware
T1584.005 - Botnet
T1003.003 - NTDS
T1586.001 - Social Media Accounts
T1102.002 - Bidirectional Communication

MITREへのリンク →

Medusa Group

Score: 0.58

Matched TTPs:

T1071.001 - Web Protocols
T1003.003 - NTDS
T1529 - System Shutdown/Reboot
T1569.002 - Service Execution
T1218.014 - MMC

MITREへのリンク →

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクターグラフ

← Pulse一覧に戻る