Coper / Octo - A Conductor for Mobile Mayhem… With Eight Limbs?

Analysis of an Android Malware-as-a-Service Operation

Coper, a descendant of the ,,Exobot malware family, was ,,first observed in the wild in July 2021, targeting Colombian Android users. At that time, Coper (the Spanish translation of “Copper”) was distributed as a fake version of Bancolombia’s “Personas'' application. Its capabilities included keylogging, interception of push notifications and SMS messages, as well as control over the infected device’s screen.

In early 2022, researchers at ThreatFabric identified a post on an underground economy …

analysis android android malware android users application as-a-service capabilities conductor copper distributed eight fake family july limbs malware malware analysis malware-as-a-service mobile octo personas service spanish targeting translation version