CallMe

Malware updated 6 months ago (2024-05-05T12:17:35.730Z)
Download STIX
Preview STIX
CallMe is a type of malware, specifically a Trojan, designed to operate on the Apple OSX operating system. It was first analyzed in February 2013 by AlienVault, who discovered that it is based on a tool called Tiny SHell, an open-source OSX shell tool available on the internet. The CallMe Trojan has been linked to cyber espionage campaigns against the Uyghur community, showcasing its potential for targeted attacks and data theft. The CallMe malware is closely related to another malicious software known as FakeM Original. Evidence of this relationship is seen in the infrastructure overlap between the two, notably through the use of the fully qualified domain name (FDQN) "googmail.org". This domain was utilized by both CallMe and FakeM samples, indicating shared resources or potentially common creators or operators. In addition to FakeM, there's also an infrastructure overlap with other Trojans such as MobileOrder and Psylo. One of these overlapping domains was used in the 2013 CallMe activity concurrently with its use for FakeM MSN samples. This suggests that the threat actors behind CallMe may have a broad reach, managing multiple malware variants and targeting diverse systems. These findings underline the importance of maintaining robust cybersecurity measures to protect against such sophisticated threats.
Description last updated: 2024-05-05T11:21:17.423Z
Aliases We are not currently tracking any aliases
Miscellaneous Associations
Other elements of context that could aid in the identification of relevance
Analyst Notes & Discussion
Be the first to leave your mark here! Log in to share your views and vote.
Source Document References
Information about the CallMe Malware was read from the documents corpus below. This display is limited to 20 results, create a free account to see more
PreviewSource LinkCreatedAtTitle
MITRE
2 years ago