PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Cảnh báo mã độc phishing trên hệ điều hành Android

blog.viettelcybersecurity.com | blog | #malware | #android | #phishing | #banking-trojan | #vietnam | #otp-theft
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Viettel warns of Android phishing malware MB.Fishing_113VN impersonating Vietnam's Ministry of Public Security: it steals banking credentials and silently forwards OTP codes to the attackers.
Published
Collected

Related coverage

research · volexity.com
OceanLotus: Extending Cyber Espionage Operations Through Fake Websites
Since Volexity’s 2017 discovery that OceanLotus was behind a sophisticated massive digital surveillance campaign, the threat group has continued to evolve. In 2019, Volexity gave a presentation at RSA Conference […]
vulnerability · volexity.com
Mind the (Patch) Gap: Multiple Chinese Threat Actors Chain 0-day Exploits in Chrome & Windows
On September 1, 2026, Volexity’s Network Security Monitoring service detected a spear-phishing campaign from a Chinese threat actor it tracks as UTA0560 targeting customers at multiple non-governmental organizations (NGOs). The emails contained a message encouraging the users to a click a link that led to the website of a US-based university. These links abused a reflected cross-site scripting (XSS) vulnerability on the website, redirecting recipients to threat-actor-controlled infrastructure hosting a multi-stage exploit chain that included a Google Chrome zero-day, CVE-2026-85046. Volexity analyzed its email telemetry and discovered that another Chinese threat actor it tracks as JungleBamboo (also known as APT31/Violet Typhoon/TA412) was also exploiting the same vulnerability chain against a different set of targets using different infrastructure and post-exploitation malware.
research · volexity.com
EvilBamboo Targets Mobile Devices in Multi-year Campaign
# EvilBamboo Targets Mobile Devices in Multi-year Campaign September 22, 2023 Callum Roxan, Paul Rascagneres, and Tom Lancaster Volexity has identified several long-running and currently active...
blog · blog.viettelcybersecurity.com
Báo cáo Chiến dịch tấn công lừa đảo có chủ đích sử dụng ứng dụng giả mạo tại Việt Nam - Phần 2
Part two of Viettel Cyber Security's report series on a targeted phishing campaign in Vietnam that distributes fake mobile applications to deceive victims.
blog · blog.viettelcybersecurity.com
Báo cáo Chiến dịch tấn công lừa đảo có chủ đích sử dụng ứng dụng giả mạo tại Việt Nam - Phần 1
The first installment of Viettel Cyber Security's report on a targeted phishing campaign in Vietnam that abuses fake mobile applications to attack victims.
blog · blog.viettelcybersecurity.com
Cảnh báo chiến dịch lừa đảo chiếm đoạt thông tin thẻ tín dụng nhắm vào người dùng các ngân hàng tại Việt Nam
Viettel warns of a phishing campaign impersonating Vietnamese banks since late 2022, luring credit card users with limit-increase and card-service offers to steal card details, OTPs, and funds.
Back