← Actors

HummingBad

Intel Library

HummingBad

Threat actorCN0 reports from 0 vendors

This group created a malware that takes over Android devices and generates $300,000 per month in fraudulent ad revenue. The group effectively controls an arsenal of over 85 million mobile devices around the world. With the potential to sell access to these devices to the highest bidder

Vendor aliases (1)

The same group is tracked under different names by different vendors.

VendorName
VariousHummingBad

MITRE ATT&CK techniques (0)

No techniques mapped yet.

Indicators of compromise

No IOCs extracted yet from reports naming this actor.

Report timeline

Every report in the Global Intel Library that names HummingBad, newest first. Open any report to see the full analysis with provenance.

    No reports in the Lore library name this actor yet.

    Threat feed IOCs (0)

    Indicators from free threat feeds (abuse.ch ThreatFox, AlienVault OTX) attributed to HummingBad. Each row shows why it was linked and where it came from.

    No feed indicators linked to this actor yet. Feeds are checked every hour.

    Public research & publications (1)

    Open-source reports about this actor collected from MISP Galaxy.