Tool
Dobby
- First Reported
- Oct 14, 2026
- Latest Reported
- Oct 14, 2026
Reported Context (2)
- The engine is built on two well-known open-source frameworks: YAHFA, which replaces Java methods, and Dobby, which hooks native functions. Hirudo Android Banking RAT Replaces Banking Apps With Patched Copies
- ThreatFabric found that the malicious copy of a banking app retains almost all of the original app’s code, but loads a hooking engine built on the open-source frameworks YAHFA and Dobby. Hirudo Android Malware Replaces Banking Apps to Evade Security Checks
Malware (1)
Products (3)
Tools (3)
Industries (1)
Countries (6)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.