Record · corpus.blog/posts/01a0ca8c-5818-702e-a631-4a3dd64093b3

Mandrake spyware sneaks onto Google Play again, flying under the radar for two years

Kaspersky Securelist · published 29 July 2024

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at securelist.com Wayback capture

1blogs citing

First cited: 26 Jul 2026
Most recent: 26 Jul 2026
Rank this month: not ranked
External links: 47
Words captured: 2,749

Cited by

Blog

In the post

Date

alan.is

Between a Mugger and the Feds: What Duress Looks Like Read at the source ↗

26 Jul 2026

Links from this post

Link

Host

https://www.bitdefender.com/blog/labs/mandrake-owning-android-devices-since-2016/

bitdefender.com

https://github.com/obfuscator-llvm/obfuscator/wiki

github.com

https://x.com/sh1shk0va/status/1261260464681553924

x.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/07/22140014/Mandrake_01.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/07/22140125/Mandrake_02.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/07/22140151/Mandrake_03.png

media.kasperskycontenthub.com

https://opentip.kaspersky.com/33fdfbb1acdc226eb177eb42f3d22db4/results?icid=gl_securelist_acq_ona_smm__onl_b2c_securelist_lnk_sm-team_______d7df10229e994adb&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/31ae39a7abeea3901a681f847199ed88/results?icid=gl_securelist_acq_ona_smm__onl_b2c_securelist_lnk_sm-team_______fcb8169927c43757&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/b4acfaeada60f41f6925628c824bb35e/results?icid=gl_securelist_acq_ona_smm__onl_b2c_securelist_lnk_sm-team_______4984c8b9aede2a56&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/e165cda25ef49c02ed94ab524fafa938/results?icid=gl_securelist_acq_ona_smm__onl_b2c_securelist_lnk_sm-team_______1bfc6631fb2ac964&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/07/22140247/Mandrake_04.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/07/22140326/Mandrake_05.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/07/22140357/Mandrake_06.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/07/22140432/Mandrake_07.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/07/22140500/Mandrake_08.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/07/22140528/Mandrake_09.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/07/22140621/Mandrake_10.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/07/22142349/Mandrake_11.png

media.kasperskycontenthub.com

https://developer.android.com/reference/android/content/pm/PackageInstaller.Session

developer.android.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/07/22142433/Mandrake_12.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/07/22142502/Mandrake_13.png

media.kasperskycontenthub.com

https://github.com/darvincisec/DetectFrida

github.com

https://opentip.kaspersky.com/141f09c5d8a7af85dde2b7bfe2c89477/results?icid=gl_securelist_acq_ona_smm__onl_b2c_securelist_lnk_sm-team_______6f9c8a19a47a63d7&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/1b579842077e0ec75346685ffd689d6e/results?icid=gl_securelist_acq_ona_smm__onl_b2c_securelist_lnk_sm-team_______f0991dcac544fd3b&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/202b5c0591e1ae09f9021e6aaf5e8a8b/results?icid=gl_securelist_acq_ona_smm__onl_b2c_securelist_lnk_sm-team_______5b19e4d8be83bbc3&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/3837a06039682ced414a9a7bec7de1ef/results?icid=gl_securelist_acq_ona_smm__onl_b2c_securelist_lnk_sm-team_______ac64174fba9d1404&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/3c2c9c6ca906ea6c6d993efd0f2dc40e/results?icid=gl_securelist_acq_ona_smm__onl_b2c_securelist_lnk_sm-team_______6b6fb3fbf1d44fd2&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/494687795592106574edfcdcef27729e/results?icid=gl_securelist_acq_ona_smm__onl_b2c_securelist_lnk_sm-team_______a4467f0827d9d96b&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/5d77f2f59aade2d1656eb7506bd02cc9/results?icid=gl_securelist_acq_ona_smm__onl_b2c_securelist_lnk_sm-team_______81689786e9157e36&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/79f8be1e5c050446927d4e4facff279c/results?icid=gl_securelist_acq_ona_smm__onl_b2c_securelist_lnk_sm-team_______d95ec81d6f0ef319&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/7f1805ec0187ddb54a55eabe3e2396f5/results?icid=gl_securelist_acq_ona_smm__onl_b2c_securelist_lnk_sm-team_______94f3f727a3af4d49&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/8523262a411e4d8db2079ddac8424a98/results?icid=gl_securelist_acq_ona_smm__onl_b2c_securelist_lnk_sm-team_______4c26d943a4292f6e&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/8dcbed733f5abf9bc5a574de71a3ad53/results?icid=gl_securelist_acq_ona_smm__onl_b2c_securelist_lnk_sm-team_______0c2c5d0f6b587e56&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/95d3e26071506c6695a3760b97c91d75/results?icid=gl_securelist_acq_ona_smm__onl_b2c_securelist_lnk_sm-team_______7ecd1ca8100b2d17&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/984b336454282e7a0fb62d55edfb890a/results?icid=gl_securelist_acq_ona_smm__onl_b2c_securelist_lnk_sm-team_______0597e0eb7a6a4863&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/a18a0457d0d4833add2dc6eac1b0b323/results?icid=gl_securelist_acq_ona_smm__onl_b2c_securelist_lnk_sm-team_______72a16839532a55bd&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/cb302167c8458e395337771c81d5be62/results?icid=gl_securelist_acq_ona_smm__onl_b2c_securelist_lnk_sm-team_______82f14928033241b7&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/da1108674eb3f77df2fee10d116cc685/results?icid=gl_securelist_acq_ona_smm__onl_b2c_securelist_lnk_sm-team_______e7fb1a6039e9bb1f&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/eb595fbcf24f94c329ac0e6ba63fe984/results?icid=gl_securelist_acq_ona_smm__onl_b2c_securelist_lnk_sm-team_______c68f527508ec097f&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/f0ae0c43aca3a474098bd5ca403c3fca/results?icid=gl_securelist_acq_ona_smm__onl_b2c_securelist_lnk_sm-team_______07f8789788c27fcd&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/45.142.122.12/?icid=gl_securelist_acq_ona_smm__onl_b2c_securelist_lnk_sm-team_______faa99ad755cddda0&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/ricinus.ru/?icid=gl_securelist_acq_ona_smm__onl_b2c_securelist_lnk_sm-team_______818b76e32a1678e0&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/ricinus-ca.ru/?icid=gl_securelist_acq_ona_smm__onl_b2c_securelist_lnk_sm-team_______6f7483ab3a8544ab&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/ricinus-cb.ru/?icid=gl_securelist_acq_ona_smm__onl_b2c_securelist_lnk_sm-team_______d294b59485bc79c3&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/ricinus-cc.ru/?icid=gl_securelist_acq_ona_smm__onl_b2c_securelist_lnk_sm-team_______b51aba534d178fa4&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/ricinus.su/?icid=gl_securelist_acq_ona_smm__onl_b2c_securelist_lnk_sm-team_______1694bba740cc8a14&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com

https://opentip.kaspersky.com/toxicodendron.ru/?icid=gl_securelist_acq_ona_smm__onl_b2c_securelist_lnk_sm-team_______5605a114e5264c4c&utm_source=SL&utm_medium=SL&utm_campaign=SL

opentip.kaspersky.com