EagleSpy

Reported Context (2)

Figure 4: Open directories hosting geacon_plus profiles (Try it: Hunt)EagleSpy Malware AttackCapture Code Search Helps Threat Hunters Find C2 Profiles, Reverse Shells and Exploit Code
The HTML source code of most malicious login pages references EagleSpy, an Android RAT that allows attackers to steal login credentials, manipulate the victim's screen, and more. Exposed Criminal Server Hosted DDoS Tools, Spyware APKs and Phishing Pages

CVE (2)

Malware (2)

People (1)

MITRE ATT&CK (4)

Vendors (1)

Products (10)

Tools (2)

Industries (1)

Countries (2)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.