Phishing Campaign Targets Japanese Taxpayers: How To Stay Safe
ID: aa80d65f-55b7-5638-afe5-bf2fae715747
STIX ID: report--aa80d65f-55b7-5638-afe5-bf2fae715747
Feed Name: Cyble Blog
Threat Score
Cyble Research & Intelligence Labs documented an active phishing and smishing campaign targeting Japanese taxpayers by spoofing the National Tax Agency to steal PII and V-Preca prepaid card details; the campaign also distributes a FakeCop Android malware (Roaming Mantis) that requests SMS/contacts permissions, fetches C2 via a proxy, exfiltrates data, sends and deletes SMS to propagate, and the report includes APK hashes, C2/proxy URLs, and numerous phishing domains as IOCs.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
