From a7938ab0080ce1007f871cfca6f85d0bd8505d82 Mon Sep 17 00:00:00 2001 From: blackorbird <14833213+blackorbird@users.noreply.github.com> Date: Wed, 26 Oct 2022 11:50:42 +0800 Subject: [PATCH] Add files via upload --- ...ce with newly discovered mobile malware.xlsx | Bin 0 -> 13059 bytes 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 Unveil the evolution of Kimsuky targeting Android device with newly discovered mobile malware.xlsx diff --git a/Unveil the evolution of Kimsuky targeting Android device with newly discovered mobile malware.xlsx b/Unveil the evolution of Kimsuky targeting Android device with newly discovered mobile malware.xlsx new file mode 100644 index 0000000000000000000000000000000000000000..f7ba336b9e87960f3ce13d2ef0e8cf9c296a3f58 GIT binary patch literal 13059 zcmeHtbyQs0moDz^5S+rTkRSnqyF<|6?(XhxA-DvG;O_2Da3^@M;KA)ddS*JE>FJsG zTkoH@)|^@wZdKj;)xP_jEobjfP7)jf0|W*J1_V4`O$p?ef%AOsV!>!&r|WELWo-ZN zCrk`3mKN#bnpRyv1n3j=??_5tP1SMG1u?Y7Wq?R)7jd&?N^~ex?$FwYLX!xTUWub{@EIRWihEB(2F1pHCwL0@=J})a zTtMAxxGVm2{96u^04%**$Sb3@l0xV*c^vpep&9Lg6^wpR0@-f5MnSiM;7SUuwvUD)&PTrWCg23V!vhT**PAPqG=prlRJ0bA zT3<^?s!8j$+IiO2cb&jtry*TXl;2#GGMuuQ%m11J48Opd zHwgfMq!X^LWJ)`?g}5J>dGK}WB(&#OZAa3@2nIcRH5>crN$~i1;ZTnNP9ndW9d+SC z;H8K9b#Arj!zprQuPPMWc(`Ljyj?vQAM1Om4}g|aU_l*v`u>~ZFklkq92QT?_P zRyD+S;t%MgCnDHB5CQmj5@&j==s-Nd?0VgisI(|CP17y-a$2^5s2|sX(0Z9>r@TZq z{e6y~k&X&C<6Eq^r$P7Oa5Aj!Nn9{g4t3u2Sx0zE5q&wto~peRw{A$O#tks|LHSk& zv^%r+6|2J;^uc4SvXzoH8fM|1w_y(I&ID=33F1M3*C!KWeH^)LGoZY+!}#$jhk_BR zlw(DXlBk;y+6<<#eg|bam`vnx7%8jdDAl{;wkX<)j1tOT|6(5zP>e5p=-|>d;SlFg$QS1=HeGMImgPh@|D`d^l>ww!C=1RUV;^SU$1^A>edkDK#>Ct!sPai$}Ni zYh;${SAiUyv{_q_z^b9WK_s-X728&DEOhnA>S};)7L0UjkqoQ;5W8)fhXHP-d{=`uRY*`uPcIp5yd?8>4^G!A}$Z zBSt5zMCA~JJe%-prwcEss-bgM@7&0Hu~rgjB=aaXeb{ zFcRKGVp z_=_Alh9NJ?U6|Ubjp$-JWot%7K)=#Ip}V*r1~(tuAWK_GTzWr(zok7%q~0?yC7?q0v5zCJ=Sr-=;iyd7yQ}P*5xknltn02M!CIyhZU> zLk|u=#v?`{@%Sde`IC(utf2LHQDXZ161v?rE z8I`eWRHimyE5TXdW9F+Z$(1#sR3nCkIY6i&luCKE`kI!v8-$+t z#gb~v?0C!N_c@UpEu+7yWt=Q9%W&-Tdyr>ve^)pY+_~S z)BbqtQ&gqKqn*0Q$wET=wM?_>L^HUSd{yaiY4PFo%Yowln=0BxP5JYL(iLQim7P)T zVtDN1vkuiADu3m&6~Q@z#7~sZRt4Ai9BYeM+!<1`6}@{?DWm-`n@K(w^6cML&S5AW ze8o@LKt*m_RUuzGJDaYkYfgqy#!l}_4Bn^WT}h#>FfUTD8N6D_-WuJ_g^`HXlw-G{&rG`!4-yK+I_s7-p5ZKD=U!6i*xI~#cA8(PAxa7 zD+(xc3zeR>Ma^k*PfE>4nNbtM_`92{H^SjL!e|$l+vkICN)Wn+HonzVRVJwXD%?=j0%Q_V0&?C$9j02BrW ziZQ3rj%)aK3WKVE;0sE|lA-C@lAwjz2d2=nHh^_t3iNku2mq9sEKmm#RB{_h{b?aI zP#tQ9;Xll82Z|Xr=#65&(m-7c%gWKz4(Tal6k_gSkL zi#IEqUXuV(fg>pF4HPRuTPBS~*%@M0F|x_?q4ke)@+3iPZbK3Gvq$yDD{JFV0A==E z1lI0T_Os4zekDzr&+uiT;AQGBM&5&QAZH`U&U!wQaUX=PzQKojHv_kmpy;?lj3`{0 z$=SJ3O1L?FN70w;(WZo0LZ_%J7xZ*Y2VuWQ;b;J}lO@xnLq`e0%td8%Zu&#haVACp z`Ax!FpBG4VYzL?n7Ik1nS?xmy0@;=`ZB+GEMzOsco(Iry#FBTvGQRZldpZ%`VsoY z($f})P)MP0C6tVv?Yx!yKf9LL$`Gr!P$OP&Ykb!_H=sIz+jhuS+SG|7li7dS5 zh~Dx%1s_%hgFEqHIluUPkXJ^||7c?>bHG!9GGT&WN&?FQ`FTjmHXl{L3HD(POfm!( z?G|T+KP1yF1!!|HkegfU)s-Z&3LCs1Mi45Ua2W8!mZ_0cGK=O>YOgc;eV1sd?l5!L zWX6&d-Ma;4agz*F5^x)p4KcRbEZeaC?C!AiX>{%Mt}iKWJ)=Q#X4s~;}c6K-!wo(rs2mb(T)OiU48Vpt7)f)d*wh^v8_r* zx#M{#jsJkllQ~@ZCr!Q()K7@xls4q5tsGKmsHu}@EGeu-}5nf zFzIF|WKHK0?s9shma(Nkjx&+gD)g!`u8Vg^t(R1;Z3IF4L;7v)KlWQJmgPx4Mw^7J zl+j%mQ^~xxZju)|qdAUyxRfJYLax0v8<;U95vFxo$ws-z&BezcY{&8d#x3I(g^S|P zGmDo3X3A~)>Om_1D=*jF475k!3Das{uT<-gu?NiT zrvivJXrJ7!aTgiN}?puL;lkQtHLTK7#pU(0|nJl9aS%#Nz`M!w+tdJrklf{5M zA2Dp$Cia~`bmR#HWiUm6fHI6hXbFm#)O*<4c$*|~Bibx#KQb~D{N&KwgaJ}Zay+BS zC0u+pgQ1N97zj}j;)H>O#bq?nI#yvD1BjO^B@HU;&^8D36kopOU`7XBjaAET1&A1} zZH}V};1q~3aj=C|ZY7xcQ@5#7XZiW(;H2UAs%C?GA4z32=)hV@XN=3(TBD&{H*iwJ z&@ou25S-L|syAYHk;J0NdRR6Eu!+%OV+4_j4X}v=7!2E4*}{y_bq-9@8G?{W zg6WAQU_5`w-~tm#H);oEWFXG}Z=bk@AV?aKgR@lS5|c^7RT*;5ap6258NCK)vC^U% zXz(P-?3gS8&T;nyk!NRvcO+1S=t^Q>sM3vEB8TdRQf(9WBv4UxB~Y1|R6b`NHE;it#EjM$(sUpcd1C<9K*BBm-Sq2-!AdQh~V6xJp%#%%-B_g;H z^vnv${&k}JV^?vJBb=>S)9G7{@;9-^ZXcx5k-6=8hT3|j-C_&x==BKhOP;`GTG0$1 zy!Lp;64;7MM;HyOoeh+Wz#H%D0zoI9Y!>g~Uz{qxjaeQX1PDkC+P~~ne|nX_b*e)D zpE%VS#euy4-l?Mhu^)CYF|;&f{Q381C1+G+$!eJx<-zX}e518pir6XpzxE&V~IUt06$J%rOLu7F z_5FqYlPjoiOj2Odw}_H;bkq~G^F6e30|92RI4*SBmY~qMUN{m|Di$nkSN^11tZnXY z1!>m^fhZzOOOX%yYAkWJxFDZ1!OVE%iuG2_M^x^%B?Tlxpr)YY6Y-)(HWc4BO8s0ro(g!E`wscr zf{j-jZXS3({(Qnr8cX(Ak6()`p+4gwHCmVR%w2G~_^%R}H8w7&YkJl9x`VeIXfk@# z`(LTI@S+`97%vdCtZo>0yBM=KAC~yfWd`Jb_wuQ;TwS#?cK{EyyWKW)2^Z)aE4)um zTNK58{CM69w!2YuIOyX+BNhN2*!+z;pPWYvmD>urCyC%9q&lv3iiVzv8GJ_9c;$2Z z0a;;Al!65ES!iszfFv5HbayNBeyEdKtOmeLm2s}K7yp21t?@p6Xe(w-fL{LqQ%_#8 z9}J^WE*MtE?jRSx+S=8H=3sA`8k+8X^ESIvynvdT@%d#8+YdJ^ctxLbac#yf)e_n+ z0#qhvZOX2?u{=G_Y&~7x0x(=9d1%PBD)VctJeUv=MYIIRqI=mH9{0S0*agHTTv+S9 z^wLQJ)IO(!FkqdopWq~WM&s=8wo75UJnng~`!pWnG1O2K%gN`lv;*1{5Nvat!UHM9 zYJpQ&EI}XB5<*Jf67&aNcFE4bW!(?&fDeUXyprVWKKaRu2S&J5=CuoB%eM_13A6pf z`1{z&La4A?0eR^~)|i94bL@V@;$H8vk;SiJj&?shbd+R>k24pbIgZl zL*ko0id(fJeG9HhcR?p>mVtxd=a;XhH6m9aFI;h)2yYY7E|;BTiJSdu0_cxAgb(jd zwr@L6KTb=|%JB4TSMMr4zHPD`li3YO^RX^+(qf-8rnF`ZFP}u;4X#Q~9IiVxraboW zKD#*Q2F=OXr+X7J+CQy=eRTM+J54tN?#Cx z@>(Xnbh|8I@DiHQLnTr2+NwI`#_EZ@F+=l)=3<&s$iPfyrB2o-{irywKhPA;BcAk zR;_qDeq|FK85kHz9kozX@o^0h9K2o^@F!08QzNMSVPfjlE&|Cm5f^^jL>(->gN*ld z)hjug+f*D3dCS>$d8hLH5a|`-Gy@R!bi!;|>x_}RJp!jIO~t8M!S<9_t1Qq>Ad;P! za&nmvF`sjNdh|wOSPYP1!09`g#mEranWD3V9uWg0e5icT$Eh0-CL!LzaYE~7ijmms z*y+H+Kx_EOb->5qTR=FjVo%ob2IlC(NkJ7C`qDv?b{b@=on$i0Vc{dIq9Nhl>UJoF zq)OW05Z(5h!f7B;$NHW_sv_lr7;iJ)!8;GT=aU?l0H$0iJ-IH-e23%Z?_zCxsdgX)AA1EN64c3Y2dyUlI+ z)KwIUz=nk9eSTn;c#YZz;GF3RA>9TzhvsmLvwjJvgpEX#;}Eq=`Bs=2wWGWhE4QPd zh*F?51S1_=VuP#8T{&G804U61$eGO6B-N8MVkmX(!%ZC z`lKM1if0uu^t^eL7Sb}wmMUr_4O(cJ6A$A?A%FLY$^5Kq2jH8n-tMV)UXr2@mBidj@A4BXAzN>@KP9HUal5$E| zwwPU6<7jP7qrg>RE~J$)0|~ciYt}q)4gofcnj{4#lJT`+7ZvKlM;R#eWE6(_ zp*th@;DW3`ZHDfzjTYtQn`DUC%#P~lDi~vDT{xyJQ6&03Dc{(-#K!Z63+1hf*Ti$C6tR#Uy!`Tk&nY~WN3CSIKVJ_ zeB#p7_0fFw?lX0sn(u9nOdh9X0Lii{Kio*tki4}TM)4M|poH8)l5#>8l)NPaX4brT zk+2LJx`eiIpp$q4W+T?5A!q*FhX5h2O>lvoX#IC}9fXR2B+@MeT6TMdCBB?K1%_iLI+7_do!b& zn@daD?A4Eb;Rj2mJ9C!o_xdK*9_OjSgKm|NZugFt=Z4oiiHs*_ci*2t_1k5?7cAXU zrANq8$)gY9q-0I(T?z`Oyq%sC1^noo51@(2(v~_fIy# zY#T!=n4qxBpaZ$>%<=lnmiX-C6inIWu5{mNN^q^w(k*E{Vf@C9j}GW={n;G|A=~Dc zfz{@Ule~#My#exe%@xioVEqbVbpw(s3Sr3tkX3g+Hz3Ut91Wo4-G^ZF1o?_=$nH^b zk=PD4JN9TYAgt-?;aY22H_^Y?c!roy*-nq_<493qVs;Y> z$}Q6D^UxZCmQrP}ElHh{YC?#quR@_M)-q(@0Tj3@!w0*EZ%g2E9Gno_N-W4oOGv#H zX4b>xnXQSIylGt@>qo~ZzTOiic?1BB^!I}4Th8S1oujvW!un@x1?n<191r1$4l{;l zZmqFyS#kPl=XHF#U((8?mMR{z-bB}U3x`@UWQlh ziL{L@q7bomzk)?M$&34ufF)+NJW+L|`CYK^`ARlk1~?bhbW>v&NlCIL0GjUvrsu#( zblgxynLRk=%nCmNnWfVF(svbjy)g>;V?F164LkIpkmx}8rC9?lQ&f(x70XrD{oF1= zw0cF)~~T2H?7HYhyHdsvPmuo$8zYK_}{Y(*|ni=YE*Kdo~|;U zE<!U2bFQy=$~hcV z7S`{RWln~hmdLK3gP_<};tGeCF8{qs>x()9hz4g5(Y~lc@s<5IjvW>kB@F_zS?eaJ zc?OSgG12}4AoEF6WY|t1QC(K_*@MRFhY+MYkqz6Oz`0%0Gi@YY?NTSjN0hLT3x6tx zF-9k7E}}!i=AnSjRpg3A>01MQC)$sddjzOzyB5&(1^rwd2WJG?h-*tlnj5pXA2V9L zBY?a=vJSo711}mtxlNqkO?Ee4Zf|d=UO8>FMH0C0A{}9gRfL%Boq}CII<;u|XvVqp zMMYRMS#{RPL-M#rpG>wTw>kFnx2fwUM%MVJlSfVyO?m)eo4du5nD$G$t4G!nqu<=u z90%__{Y-Ct0|sc);XpvL@&75kMf|t)*1^@n@Mm5-qoOIh1jKlNyhBb{?UcR|5l4|4 zs!2Tbm02wQ$PpRHOS)u8-R?DKI|W5Go**5kY<76y{)MN1E-L-HC?0HuMZZxQHVR1; zhe>HSw%F9qTe`~MKB6S2C|7_sVU4r;n&tuRJv;XII-?O1J~_6|TKiFQlDf~yxtDV6 zQk`OXk-11sMiLhKIP|5+v3?PvIf|szDjdWbbrVeVpVq~+a4a3Sk>Ke=%V@MJcEqr^ z{Km6IW54Lmj(?b59!&xFvHZNriM>3^rOXjYTbd>u_=!4ktvZk-@({eK0PLG71iJ8K z!??gJgM3%NYKv*l7B%@nzs=h9cP@(k`nqu%rkjy~%%IgYgp(Z0QzHIDoP^^~m6TqO z$Sz#Gia=H(l z6Kx^nECc<%Trqdru-!nevg<}OrkGK%EI6A?h1|ThkRey|fz6i+{$$K7g&m80ew5Tu z%4QJLS3@N9i0@y0Ss*(DxwL5G$UcGVtVuLx)DQnu0Y4QyK_r+8Yu>EOm|yy7JW|=A zpSEeD&cWJ&xHcC#sXV-}b{$#g$^sq;^sh&q4=#Zav4+E+*1xy%y(2M|tIlctP@^v$ z#hd5TTGD|OZq`yqL7Aa8IiW6IP%hyX%IoUqc~4Y1m$;$GTQ!>z_P)Ffk^Be7z(x(> zGA`i?PQt8`(G%K-HKNBES)I5q4K^Bqm7WDW zXc``gsCO%guLJQ;rqpWYHnJ%Sosw=vE-^z7np)McqU$~Cy{#7aDwE9jwpu_WSXCO* z>~;z!!IFJ0&ww-dMLoe#MmBNixb%K6iEFSs$_C#<_KLZkiqK@% zY?a8}(Z=2I&Ph;Laie3|EnT+et)iAxZgv}gs3RwT{b11i7;(fsT0eX*>=u+I(CY4n zO`?~{tfWj;hgy|7#Wm-XD|s2mRyMDg9aXYn`5u=mugytx=v3bT!tSHgg)% ztwbU?6`z9&xGl!jii?d+x3x~Jf7iialqm1wBzd|KBThXuo~v^HkyRKh!U>yA*JhIX#|z+@tH>#w1{ zI^7WQcBFeG$pfJ}1-BZfn|mxm?NRS~reE%luFP^z$^6r^l63x2jquM`{Gr2ttCsR3 z`2kTN$DfHaMwbdUx)E6wOcWM~gqd}MBzy&?#a)Mo3X$-MA8*dR@=Fq3^^kw)64Pc5 z*y)&H?sejU&Rw?ffWXVE(^FPa>GXm))>1Qa3?^9#@HTXy>G}J-6>;9;{!D0$%WP*d zl~2YyoFro1@X;&|>W1OV)pGkQInSh$2{4Zwc%8%j6Qa~6D>)ZZ$BcY^0kTfA}Y!dIpNM2}w4 zIQDgLD#5`_U`G$Cp0z~k=~t(m^Y)ZRax=5czY^yuazn(-%Q?{Jdsj%>();l=uSW(Z zbtjL{v{#}(CN51h<{dFq>15=^u-h_lwKG^{oQZms=8+7oym`r?eaicisR@N>6aLiJ z{w>ivAJH3Bj~1WlZ`*TzZ#~73QG2O zvbTRFBfqe>|2qCFF8BW&Me_M~{|4nJv*dq{lJFc+{s!e|!}foUvi@9K{2P>?9g5#k zekH;ERWEdq{}H?X6L0f(lwWCNFRkZ4$HDVlJj?P6b?gt@|C0my(+m6#_$#UBuVNiP z(|rC4_$L?bca&dQF@F`S>e&nZ73CMP{-gu_4)|;H{jXxxBm55dQ>?$8xnH~2e-$h1 zxvBqOiuDugZ?*Mn`|7V^<)i)%_*1OET?)VUfBq`gCFbuazi8{v#@FxK`nAse;tKy9 zcUV6Ge{UlF4)E(v;-wt^=P-B<#?OlSPsQ=y5q?e6UUnRR4ngui5dLHT@%yd6CIv5f z+@FJr>Oa)+?^)gNH~$(6U-E`O#|8DzoBvSYf65|$$N4qRyadia2RH3s!szce{^|?= ds(VVhzYR)ql8{g@=;+Tcrf1V{p?`Vze*iR^Qj7oq literal 0 HcmV?d00001