SharkBot
The MITRE Corporation
· Published 18/01/2023 20:44 · Modified 27/03/2026 01:41
Family
Essential information
- Confidence
- 100/100
- Is family
- Yes
- Published
- 18/01/2023 20:44
- Modified
- 27/03/2026 01:41
- Revoked
- No
- Author / Source
- The MITRE Corporation
- Related entities
- 22 attack patterns (mitre), 1 intrusion sets (apt), 2 countries, 99 indicators
Description
[SharkBot](https://attack.mitre.org/software/S1055) is a banking malware, first discovered in October 2021, that tries to initiate money transfers directly from compromised devices by abusing Accessibility Services.(Citation: nccgroup_sharkbot_0322)
Marking (TLP)
TLP:CLEAR Copyright 2015-2025, The MITRE Corporation. MITRE ATT&CK and ATT&CK are registered trademarks of The MITRE Corporation.
External references
Related entities
Attack patterns, malware, vulnerabilities, indicators, intrusion sets and other entities linked to this malware.
Attack patterns (MITRE) (22)
-
Web Protocols uses
-
-
SMS Control usesT1582 MITRE
-
Access Notifications usesT1517 MITRE
-
-
T1483 uses
-
-
Input Injection usesT1516 MITRE
-
Out of Band Data uses
-
T1544 MITRE
-
GUI Input Capture uses
-
Intrusion sets (APT) (1)
-
Sharkbot usesAlienVault Confidence 100First seen 01/01/1970 · Last seen 16/11/5138 ·
Countries (2)
-
United Kingdom of Great Britain and Northern Ireland targets
-
Italy targets
Indicators (99)
-
stix 100/100 Revoked· Valid until 12/07/2023 · Source: AlienVault
-
stix 100/100 Revoked· Valid until 12/07/2023 · Source: AlienVault
-
stix 100/100 Revoked· Valid until 12/07/2023 · Source: AlienVault
-
stix 100/100 Revoked· Valid until 12/07/2023 · Source: AlienVault
-
stix 100/100 Revoked· Valid until 12/07/2023 · Source: AlienVault
-
stix 100/100 Revoked· Valid until 12/07/2023 · Source: AlienVault
-
stix 100/100 Revoked· Valid until 12/07/2023 · Source: AlienVault
-
stix 100/100 Revoked· Valid until 12/07/2023 · Source: AlienVault
-
stix 100/100 Revoked· Valid until 12/07/2023 · Source: AlienVault
-
stix 100/100 Revoked· Valid until 12/07/2023 · Source: AlienVault
-
stix 100/100 Revoked· Valid until 12/07/2023 · Source: AlienVault