MalwarePublished
Analyzing an Illegal Android Gambling App Built with Flutter
Source AlienVault OTX General
0
Description
This threat involves a sophisticated Android malware campaign distributing an illegal gambling app built with Flutter. The app masquerades as a Macau casino clone and uses rigged games to financially exploit victims. It exfiltrates sensitive data such as geolocation, phone numbers, and device details via encrypted channels. The malware employs a multi-tiered server infrastructure with fallback mechanisms to maintain persistent communication. It also leverages gambling addiction through VIP recharge and referral schemes.
Indicators of compromise
Domains 14
- zc.nationbj.com
- api.cloudfareproxy2618.xyz
- api.testylhg24.online
- hsreg.youkureg510.xyz
- line.yongli250627linecfg.xyz
- reg.alibabareg0303.com
- reg.baidureg0621.xyz
- reg.baidureg0627.xyz
- reg.gitshreg611.xyz
- reg.gptreg0706.xyz
URLs 17
- https://api.cloudfareproxy2618.xyz
- https://api.testylhg24.online
- https://hsreg.youkureg510.xyz
- https://line.yongli250627linecfg.xyz
- https://reg.alibabareg0303.com
- https://reg.baidureg0621.xyz
- https://reg.baidureg0627.xyz
- https://reg.gitshreg611.xyz/device/register
- https://reg.gitshreg611.xyz/device/register|bydbikeend
- https://reg.gptreg0706.xyz
Hashes 3
Community reviews
Loading reviews…