Essential information

Value / Name

jsonapi.biz

Confidence

100/100

Revoked

No

Valid from

29/04/2026 11:43

Valid until

24/09/2026 11:39

Pattern type

stix

Published

29/04/2026 12:14

Modified

21/05/2026 02:17

Author / Source

AlienVault

Description

No description.

Pattern

[domain-name:value = 'jsonapi.biz']

Labels / Tags

Labels: android banking trojan credential theft firebase c2 india targeting kycshadow otp theft sms interception vpn manipulation whatsapp distribution

Marking (TLP)

TLP:CLEAR