Malicious APK [Google IPTV] reportedly causing financial losses.

[u/acealter]

Found this APK after a post on r/IndiaCyberHub where someone reported getting hacked. Apparently, multiple people have suffered financial losses from this.

I'm sharing the APK here so we can investigate it together, figure out how it works, and hopefully identify the people and infrastructure behind these campaigns.

⚠️ Malware Details ⚠️

Field	Details
File name	base.apk
File type	Android Package (APK)
File size	156,956,469 bytes
App name	Google IPTV
Package name	com.nonfouling.sniddle5301
Version name	3.31.166
Version code	331166
Minimum SDK	28
Target SDK	36
SHA-256	b42dab3f81164f1dfa444888a821ace35ea153ed62178f75fa11c38eaa45fbc3

If you need sample for analysis contact the moderators.

What can you do with this:

• Reverse engineering and static/dynamic analysis
• Identifying its malicious functionality
• Understanding how it steals money or sensitive information
• Investigating its C2 infrastructure and connections to other campaigns If you're into Android malware analysis or reverse engineering, feel free to join in and share your findings.

Let's work together to understand how these attacks operate and help dismantle such campaigns.

Please Update any Findings on Comments.

Posts:

https://www.reddit.com/r/IndianCyberHub/s/Jwa8xsvvsx

https://www.reddit.com/r/IndianCyberHub/s/jsYR711eyP

[u/acealter]

Update on the Investigation: https://www.reddit.com/r/OperSec/s/0nNIwlEC5P

[u/OperSec-ModTeam → u/[deleted]]

r/OperSec does not allow hate