Twitoor

Malware updated 6 months ago (2024-05-04T17:15:59.505Z)
Download STIX
Preview STIX
Twitoor is a type of malware designed to harm computers and devices by exploiting their vulnerabilities. It is a Trojan that has been observed downloading various versions of mobile banking malware. The designers of the Twitoor botnet took steps to make its communication more resilient, including encrypting their messages and using complex topologies of the C&C network. This included innovative means for communication, such as using social networks, which made Twitoor the first Twitter-based bot malware. According to researchers, Twitoor posed a significant threat to Android devices. The malware was distributed through links in tweets containing commands or configuration files encrypted with a unique key. Once installed on a device, Twitoor could download additional malware and execute various malicious activities. Researchers noted that Twitoor's use of Twitter to communicate with its control servers made it harder to detect and block. Overall, Twitoor represents an evolution in botnet design and highlights the need for continued vigilance against new and emerging threats. Its use of social media platforms like Twitter demonstrates the creative lengths to which malware creators will go to evade detection and pose a risk to users' devices and personal information.
Description last updated: 2023-06-23T18:00:34.431Z
Aliases We are not currently tracking any aliases
Miscellaneous Associations
Other elements of context that could aid in the identification of relevance
Analyst Notes & Discussion
Be the first to leave your mark here! Log in to share your views and vote.
Source Document References
Information about the Twitoor Malware was read from the documents corpus below. This display is limited to 20 results, create a free account to see more