Tracking RoamingMantis
ID: 161217b0-63b1-5773-a898-93e74a7139c3
STIX ID: report--161217b0-63b1-5773-a898-93e74a7139c3
Feed Name: Censys Blog
Threat Score
This blog post documents threat-hunting for RoamingMantis, a mobile-banking malware campaign that alters local DNS settings and attempts to deliver malicious APKs to fingerprinted mobile devices; the author uses Censys to identify C2 infrastructure, a distinctive JavaScript snippet that redirects to "post.apk", and augments intelligence with passive DNS and community threat feeds.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.