Malware
malware:crossrat
Malware discussed as sharing a command-and-control communication scheme with Bandook and Dark Caracal mobile malware.
Malware discussed as sharing a command-and-control communication scheme with Bandook and Dark Caracal mobile malware.
“CrossRAT, Bandook, [00:50:00] and the Dark Caracal mobile malware all use the same scheme”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | ASSOCIATED_WITH | Prince Ali | Uncertain | 38 |
CrossRAT ASSOCIATED_WITH Prince Ali
CrossRAT shared a communication scheme with Bandook and Dark Caracal; because Prince Ali wrote Bandook, the researchers said this looked like a possible common authorship clue, not a confirmed attribution.
Uncertain Confidence 84% · Cooper Quinton EP 38 Details
“It looks like the same person wrote all of this malware and we know that Prince Ali wrote Bandook.”