MazarBOT
MITRE ATT&CK: S0303 View on attack.mitre.org
- First seen
- 2016-01-01 00:00:00
- Malware type
- trojan, botnet
- Family
- Malware family
- Related IoCs
- 1 (1 malicious)
- Last IoC activity
- 2026-09-06 00:58:26
- Profile updated
- 2026-07-07 14:08:23
Targeted regions: country_code:dk
Context
MazarBOT is Android malware that was distributed via SMS in Denmark in 2016.
Recent IoC activity
1 malicious indicator in Maltiverse are attributed to MazarBOT (S0303). The 1 most recently updated:
| Type | Indicator | Updated | Sources |
|---|---|---|---|
| file sample | mazarbot_2017-10-11.apk | 2026-09-06 | 2 |
Malware & tools used
- Generate Traffic from Victim (attack-pattern)
- SMS Messages (attack-pattern)
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Apk.Mazarbot (report)
- b0n1.blogspot.de — Phishing Attack At Raiffeisen Bank By (report)
- heimdalsecurity.com — Security Alert Mazar Bot Active Attacks Android Malware (report)
- MITRE ATT&CK — S0303 (report)
- tripwire.com — Android Malware Sms (report)