IoC Investigation

https://threatpost.com/new-android-spyware-whatsapp-telegram/159694/

URL IN DATABASE

URL · threat 0.50 · 2× seen · 0 datasets · Mobile ATT&CK · last seen Aug 06, 2026

🔄 Pivot:📁 Mobile ATT&CK

Threat Score

0.50

Sightings

2
0 sources

Detected Type

URL

Enrichments

1

Related IoCs

20
URL / Domain Dossier → Full OSINT Pivot + Case Create Case Takedown Export STIX/MISP ← Browse All

Domain / URL Intelligence

Hostthreatpost.com
WHOISNot cached locally.
DNS / WHOIS Dossier DNS Audit Passive DNS ↗ Subdomains (crt.sh)

Seen in Datasets (0)

Not linked to any dataset.

Enrichments

classification

OSINT Pivots

Full OSINT (30+ lookups) ↗ VirusTotal ↗ urlscan.io ↗ SecurityTrails ↗ crt.sh ↗ ThreatFox ↗ URLhaus Link Analysis ↗ OpenSanctions

Related Indicators (20)

Indicators sharing the same category.

IndicatorTypeCategoryThreat
https://www.flexispy.com/en/features-overvie… URL Mobile ATT&CK investigate →
com.google.xxx OTHER Mobile ATT&CK investigate →
https://attack.mitre.org/software/S0506)’s URL Mobile ATT&CK investigate →
locale.getLanguage OTHER Mobile ATT&CK investigate →
https://securelist.com/everyone-sees-not-wha… URL Mobile ATT&CK investigate →
https://krebsonsecurity.com/2019/06/tracing-… URL Mobile ATT&CK investigate →
com.android.systemui OTHER Mobile ATT&CK investigate →
https://attack.mitre.org/software/S1214)’s URL Mobile ATT&CK investigate →
freenode.net OTHER Mobile ATT&CK investigate →
https://attack.mitre.org/software/S0489)’s URL Mobile ATT&CK investigate →
https://attack.mitre.org/techniques/T1670) URL Mobile ATT&CK investigate →
https://attack.mitre.org/software/S0286) URL Mobile ATT&CK investigate →
https://attack.mitre.org/software/S0440)’s URL Mobile ATT&CK investigate →
https://web.archive.org/web/20220706125432/h… URL Mobile ATT&CK investigate →
https://blog.zimperium.com/how-zimperiums-z9… URL Mobile ATT&CK investigate →
https://www.trendmicro.com/en_us/research/19… URL Mobile ATT&CK investigate →
https://cyble.com/blog/mobile-malware-app-an… URL Mobile ATT&CK investigate →
com.android.callservice OTHER Mobile ATT&CK investigate →
https://social.cyware.com/news/aptc23-is-sti… URL Mobile ATT&CK investigate →
https://www.sentinelone.com/labs/arid-viper-… URL Mobile ATT&CK investigate →

Copy as STIX 2.1 

{
    "type": "indicator",
    "spec_version": "2.1",
    "id": "indicator--eced8474-b81a-4db9-7766-000026da4644",
    "created": "2026-09-04T10:51:34Z",
    "modified": "2026-09-04T10:51:34Z",
    "name": "URL: https://threatpost.com/new-android-spyware-whatsapp-telegram/159694/",
    "pattern": "[url:value = 'https://threatpost.com/new-android-spyware-whatsapp-telegram/159694/']",
    "pattern_type": "stix",
    "valid_from": "2026-09-04T10:51:34Z",
    "labels": [
        "mobile att&ck"
    ],
    "confidence": 50
}

Linked Cases (0)

Not linked to any case yet.

+ Add to Case Create Alert
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

⚡ AI Skills

All SkillsResolveEnrichCorrelateSummarize

🔍 Lookup & Enrich

EnrichmentsPivotLink Analysis

📚 Docs & Reports

DocumentationGenerate ReportAPIPlatforms Hub

💡 Recommendations

⚙ Automation

Operations Center

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook

🔗 Related Tools

Mission CommandAdvanced SearchOperations Center