Malicious App Targets Turkish Ministry of Justice
ID: 5276f00a-5dad-566d-8f6f-cb9cebf5bdb1
STIX ID: report--5276f00a-5dad-566d-8f6f-cb9cebf5bdb1
Feed Name: Cyble Blog
Threat Score
Adalet is a malicious Android application disguised as the Turkish Ministry of Justice app that, according to static and dynamic analysis, requests numerous dangerous permissions and abuses Accessibility overlays to steal credentials (Gmail, Google Authenticator, TeamViewer), capture keylogs and audio, send SMS, forward calls, and disable device protections; the report includes APK metadata, hashes (SHA256/SHA1/MD5), a C2 URL, MITRE ATT&CK mappings, and remediation recommendations for users and banks.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.