Phishing pages used for Malware Delivery
ID: 890b998d-255b-515a-996d-a9372ad3fe15
STIX ID: report--890b998d-255b-515a-996d-a9372ad3fe15
Feed Name: Cyble Blog
Threat Score
This report describes a phishing campaign using https://srqc.online/ that impersonates Patanjali Yoga Gram to collect personal and banking details, then delivers an Android APK named "Customer Support" (SHA256: 87a9b872cd82d56f02632949a5af82f700125692f5f1561c088b5ace317b5abf) which requests SMS-related permissions to intercept and forward OTPs and SMS messages to attacker-controlled numbers; the report includes technical analysis, APK manifest/source snippets, IOCs, and remediation guidance.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.