{"id":3225,"date":"2018-06-15T19:14:56","date_gmt":"2018-06-15T19:14:56","guid":{"rendered":"https:\/\/kasperskycontenthub.com\/threatpost\/?p=132858"},"modified":"2018-06-15T19:14:56","modified_gmt":"2018-06-15T19:14:56","slug":"new-banking-trojan-can-launch-overlay-attacks-on-latest-android-versions","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/new-banking-trojan-can-launch-overlay-attacks-on-latest-android-versions\/","title":{"rendered":"New Banking Trojan Can Launch Overlay Attacks on Latest Android Versions"},"content":{"rendered":"
<\/div>\n
<\/div>\n

Researchers have discovered a new Android banking trojan that holds striking similarities to the infamous Lokibot \u2013 but packed with new tricky features, most notably its ability to implement an overlay attack on Android 7 and 8.<\/p>\n

Researchers at ThreatFabric, who discovered the trojan, said MysteryBot was running on the same C&C server as the LokiBot<\/a> Android banker discovered in 2017, suggesting that it\u2019s either an update to the earlier malware or was developed by the same actor. The new trojan is still under development and is not widely spread, they said.<\/p>\n

The bot comes with generic Android banking trojan functionalities \u2013 once a device is infected, for instance, the bad actor can use MysteryBot modules to make phone calls, scrape contact list info, copy keystrokes and encrypt files on external storage devices.<\/p>\n

However, researchers said there\u2019s much more to the story: \u201cThis bot has most generic Android banking trojan functionalities, but seems to be willing to surpass the average. The overlay, key-logging and ransomware functionalities are novel,\u201d they said in a post<\/a>. \u201cLooking at the bot commands, we first thought that LokiBot had been improved. However, we quickly realized that there is more going on: the name of the bot and the name of the panel changed to \u2018MysteryBot,\u2019 [and] even the network communication changed.\u201d<\/p>\n

A ThreatFabric spokesperson told Threatpost that at the moment the trojan is spread via phishing while side-loading the payload.<\/span>\u00a0\u201cThe commonly fake Flash Player social-engineering trick is used in the distribution campaign,\u201d said the spokesperson.<\/span><\/p>\n

ThreatFabric discovered MysteryBot two weeks ago, and while researchers can\u2019t say that it has been very active (less than 200 infections), they told us they believe that it will be properly spread once it is fully functional.\u00a0<\/span><\/p>\n

One unique component to MysteryBot is its approach to overlay attacks, which enables attackers to draw on top of other apps running on the infected devices. This means they could overlay phishing pages on top of legitimate apps.<\/p>\n

Android 7 and 8 have security protections like Security-Enhanced Linux (SELinux) built in, rendering previously used overlay techniques inaccessible, said researchers. These protections\u00a0stop malware from showing off fake pages over apps. That has left malware families like ExoBot 2.5 and DiseaseBot searching for new overlay techniques \u2013 but MysteryBot appears to have found a solution.<\/p>\n

Specifically, the bot abuses a glitch in the Android PACKAGE_USAGE_STATS service permission (a.k.a. the \u201cUsage Access\u201d permission), which is an Android software feature that shows stats revolving around usage of apps. Usually the victim has to provide specific permissions for usage \u2013 but MysteryBot employs AccessibilityService, which allows it to abuse any required permission without the victim\u2019s consent. Android said<\/a> that accessibility services are typically used to assist users with disabilities in using Android devices and apps.<\/p>\n

Interestingly, it asks\u00a0victims to grant Accessibility Service permissions after installing the malware.<\/p>\n

\u201cIt seems that the reason for the victims to grant such permissions [is] the number of benign apps nowadays asking for exhaustive sets of permissions \u2014 making it common for users to grant permissions without reviewing the permissions requested,\u201d the researchers said. \u201cAt the moment, MysteryBot is not using such an M.O. to get the Usage Access permission, but will ask the victim for it directly.\u201d<\/p>\n

The bot has abused this feature to target overlay attacks against over 100 apps, including WhatsApp and Facebook.<\/p>\n

Other Features<\/strong><\/p>\n

The bot also appears to have innovated keylogging functionalities, effectively lowering detection rates and limiting the user interaction required to enable the logger.<\/p>\n

While most trojans abuse the Android Accessibility Service to log the keystrokes or make screenshots upon key-presses, MysteryBot\u2019s logging mechanism uses the Accessibility Service permission to do so directly after installing the malware.<\/p>\n

The method essentially\u00a0calculates the location for each row and places a \u201cView\u201d over each key. Each \u201cview\u201d is then paired to a specific key in such a way that it can register the keys that have been pressed which are then saved for further use, researchers said.<\/p>\n

While this technique requires more user interaction (i.e., asking for Accessibility Service permission) to be successful, it also has potential to log more than the usual keystrokes.<\/p>\n

\u201cAt the time of writing, the code for the keylogger seems to still be under development, as there is no method yet to send the logs to the C2 server,\u201d researchers said.<\/p>\n

Moving forward, the enhanced overlay attack capability can be used to run on the latest Android versions; this, combined with the advanced keylogging features, will enable MysteryBot \u201cto harvest a broad set of personally identifiable information in order to perform fraud,\u201d researchers said.<\/p>\n

MysteryBot also packs a ransomware module, which includes a new capability\u00a0that allows the trojan to encrypt all files individually\u00a0in the external storage directory, including every sub directory. After that, the original files are deleted.<\/p>\n

As part of this, the trojan can delete the contacts in the contact list of the infected device, something that researchers said was not observed in banking malware until now.<\/p>\n

\u201cIn the last six months we observed that capabilities such as a proxy, keylogging, remote access (RAT), sound-recording and file-uploading have become more and more common; we suspect this trend to only grow in the future,\u201d researchers said. \u00a0\u201cIf our expectation of increases in such behavior turns out to be true, it means that it will become difficult for financial institutions to assess whether or not they are targeted by the specific threats\u2026all infected devices can be source of fraud and espionage.\u201d<\/p>\n

READ MORE HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

While other malware families have been searching for new overlay techniques for Android 7 and 8, MysteryBot appears to have found a solution. READ MORE HERE…<\/p>\n","protected":false},"author":2,"featured_media":3226,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[3],"tags":[162,1361,1362,1363,301,1364,1365,28,29,1366,916],"class_list":["post-3225","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-threatpost","tag-android","tag-android-7","tag-android-8-0","tag-android-trojan","tag-banking-trojan","tag-key-logging","tag-lokibot","tag-malware","tag-mobile-security","tag-mysterybot","tag-trojan"],"yoast_head":"\nNew Banking Trojan Can Launch Overlay Attacks on Latest Android Versions 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/new-banking-trojan-can-launch-overlay-attacks-on-latest-android-versions\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"New Banking Trojan Can Launch Overlay Attacks on Latest Android Versions 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/new-banking-trojan-can-launch-overlay-attacks-on-latest-android-versions\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2018-06-15T19:14:56+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/06\/new-banking-trojan-can-launch-overlay-attacks-on-latest-android-versions.png\" \/>\n\t<meta property=\"og:image:width\" content=\"700\" \/>\n\t<meta property=\"og:image:height\" content=\"478\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/new-banking-trojan-can-launch-overlay-attacks-on-latest-android-versions\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/new-banking-trojan-can-launch-overlay-attacks-on-latest-android-versions\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"New Banking Trojan Can Launch Overlay Attacks on Latest Android Versions\",\"datePublished\":\"2018-06-15T19:14:56+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/new-banking-trojan-can-launch-overlay-attacks-on-latest-android-versions\/\"},\"wordCount\":927,\"publisher\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/new-banking-trojan-can-launch-overlay-attacks-on-latest-android-versions\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/06\/new-banking-trojan-can-launch-overlay-attacks-on-latest-android-versions.png\",\"keywords\":[\"Android\",\"android 7\",\"Android 8.0\",\"Android Trojan\",\"banking trojan\",\"key logging\",\"LokiBot\",\"Malware\",\"Mobile Security\",\"MysteryBot\",\"Trojan\"],\"articleSection\":[\"Threatpost\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/new-banking-trojan-can-launch-overlay-attacks-on-latest-android-versions\/\",\"url\":\"https:\/\/www.threatshub.org\/blog\/new-banking-trojan-can-launch-overlay-attacks-on-latest-android-versions\/\",\"name\":\"New Banking Trojan Can Launch Overlay Attacks on Latest Android Versions 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/new-banking-trojan-can-launch-overlay-attacks-on-latest-android-versions\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/new-banking-trojan-can-launch-overlay-attacks-on-latest-android-versions\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/06\/new-banking-trojan-can-launch-overlay-attacks-on-latest-android-versions.png\",\"datePublished\":\"2018-06-15T19:14:56+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/new-banking-trojan-can-launch-overlay-attacks-on-latest-android-versions\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.threatshub.org\/blog\/new-banking-trojan-can-launch-overlay-attacks-on-latest-android-versions\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/new-banking-trojan-can-launch-overlay-attacks-on-latest-android-versions\/#primaryimage\",\"url\":\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/06\/new-banking-trojan-can-launch-overlay-attacks-on-latest-android-versions.png\",\"contentUrl\":\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/06\/new-banking-trojan-can-launch-overlay-attacks-on-latest-android-versions.png\",\"width\":700,\"height\":478},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/new-banking-trojan-can-launch-overlay-attacks-on-latest-android-versions\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.threatshub.org\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Android\",\"item\":\"https:\/\/www.threatshub.org\/blog\/tag\/android\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"New Banking Trojan Can Launch Overlay Attacks on Latest Android Versions\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/#website\",\"url\":\"https:\/\/www.threatshub.org\/blog\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\/\/www.threatshub.org\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/x.com\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"New Banking Trojan Can Launch Overlay Attacks on Latest Android Versions 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/new-banking-trojan-can-launch-overlay-attacks-on-latest-android-versions\/","og_locale":"en_US","og_type":"article","og_title":"New Banking Trojan Can Launch Overlay Attacks on Latest Android Versions 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/new-banking-trojan-can-launch-overlay-attacks-on-latest-android-versions\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2018-06-15T19:14:56+00:00","og_image":[{"width":700,"height":478,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/06\/new-banking-trojan-can-launch-overlay-attacks-on-latest-android-versions.png","type":"image\/png"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/new-banking-trojan-can-launch-overlay-attacks-on-latest-android-versions\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/new-banking-trojan-can-launch-overlay-attacks-on-latest-android-versions\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"New Banking Trojan Can Launch Overlay Attacks on Latest Android Versions","datePublished":"2018-06-15T19:14:56+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/new-banking-trojan-can-launch-overlay-attacks-on-latest-android-versions\/"},"wordCount":927,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/new-banking-trojan-can-launch-overlay-attacks-on-latest-android-versions\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/06\/new-banking-trojan-can-launch-overlay-attacks-on-latest-android-versions.png","keywords":["Android","android 7","Android 8.0","Android Trojan","banking trojan","key logging","LokiBot","Malware","Mobile Security","MysteryBot","Trojan"],"articleSection":["Threatpost"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/new-banking-trojan-can-launch-overlay-attacks-on-latest-android-versions\/","url":"https:\/\/www.threatshub.org\/blog\/new-banking-trojan-can-launch-overlay-attacks-on-latest-android-versions\/","name":"New Banking Trojan Can Launch Overlay Attacks on Latest Android Versions 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/new-banking-trojan-can-launch-overlay-attacks-on-latest-android-versions\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/new-banking-trojan-can-launch-overlay-attacks-on-latest-android-versions\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/06\/new-banking-trojan-can-launch-overlay-attacks-on-latest-android-versions.png","datePublished":"2018-06-15T19:14:56+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/new-banking-trojan-can-launch-overlay-attacks-on-latest-android-versions\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/new-banking-trojan-can-launch-overlay-attacks-on-latest-android-versions\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/new-banking-trojan-can-launch-overlay-attacks-on-latest-android-versions\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/06\/new-banking-trojan-can-launch-overlay-attacks-on-latest-android-versions.png","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/06\/new-banking-trojan-can-launch-overlay-attacks-on-latest-android-versions.png","width":700,"height":478},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/new-banking-trojan-can-launch-overlay-attacks-on-latest-android-versions\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Android","item":"https:\/\/www.threatshub.org\/blog\/tag\/android\/"},{"@type":"ListItem","position":3,"name":"New Banking Trojan Can Launch Overlay Attacks on Latest Android Versions"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/3225","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=3225"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/3225\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/3226"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=3225"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=3225"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=3225"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}