Octopus Prime: it didn't turn into a truck, but a widely spread Android botnet

No ratings

Presented at Virus Bulletin 2024 by

Thibault Seret

Coper/Octo is offered as a malware-as-a-service, where customers are provided access to a panel and builder used to coordinate and execute malware campaigns. As a result, we observe Coper/Octo being used to target many countries across the globe in campaigns crafted to ‘appeal’ to specific audiences. In this presentation, we will introduce and show Octo behind the scenes: analysis of the builder, the infrastructure involved in its operation, the spreading methodologies, and the undocumented mechanisms the malware and its developer are bringing in this MaaS package. We'll also discuss statistics on how this malware is impacting our world, professionals, and the man in the street.