AhMyth

Malware family · 5 sample(s) · 5 indicator record(s) · 2 signing certificate(s)

About AhMyth

Open-source Android RAT whose builder lowered the bar for mobile surveillance; has repeatedly sneaked into the Google Play store disguised inside seemingly legitimate apps.

Indicators

IndicatorTypeSampleFirst seen
178.168.81.228:49664 ip d15648a84b46… 2019-10-04
192.168.1.21:4444 ip ab99a33e7528… 2019-10-06
192.168.100.121:2424 ip 8fad8429b4e0… 2019-10-04
194.28.215.110:2005 ip 8007346a57fb… 2019-10-05
217.11.29.164:44303 ip d4e16801c46f… 2022-09-23