FluBot

FluBot is an android banking trojan that uses overlays.

FluBot Payload

suricata: ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz

suricata: ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz

suricata: ET MALWARE Possible Zeus GameOver/FluBot Related DGA NXDOMAIN Responses

suricata: ET MALWARE Possible Zeus GameOver/FluBot Related DGA NXDOMAIN Responses

Creates a large amount of network flows

This may indicate a network scan to discover remotely running services.

Makes use of the framework's Accessibility service.