Skip to content

Add spyrtacus IoCs - #51

Open
nimrod-a wants to merge 1 commit into
mvt-project:mainfrom
nimrod-a:feature/SIO-spyrtacus
Open

Add spyrtacus IoCs#51
nimrod-a wants to merge 1 commit into
mvt-project:mainfrom
nimrod-a:feature/SIO-spyrtacus

Conversation

@nimrod-a

@nimrod-a nimrod-a commented Jul 30, 2026

Copy link
Copy Markdown

Spyrtacus Android spyware

Adds Indicators of compromise for the Spyrtacus Android spyware, likely developed in Italy by SIO S.p.A.

Includes a total of 9 indicators:

  • 2 IPs (C2, infrastructure)
  • 2 domains (delivery, C2)
  • 4 package names (malicious Spyrtacus packages)
  • 1 C2 favicon hash

The IoCs pertain to a 2025 sample of the Spyrtacus spyware, version 8.71.
IoCs related to older samples of this spyware are also included.

Sources

Closes #48

This PR replaces #49 to ensure a cleaner commit history.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add Spyrtacus IoCs

1 participant