FlixOnline
MITRE ATT&CK: S1103 View on attack.mitre.org
Aliases: FlixOnline
- First seen
- 2021-04-01 00:00:00
- Malware type
- trojan, spyware
- Family
- Malware family
- Operating systems
- android
- Profile updated
- 2026-07-07 15:29:32
Targeted industries: media-and-entertainment
Context
FlixOnline is an Android malware, first detected in early 2021, believed to target users of WhatsApp. FlixOnline primarily spreads via automatic replies to a device’s incoming WhatsApp messages.
Malware & tools used
- Broadcast Receivers (attack-pattern)
- Stored Application Data (attack-pattern)
- GUI Input Capture (attack-pattern)
- Suppress Application Icon (attack-pattern)
- Generate Traffic from Victim (attack-pattern)
- Access Notifications (attack-pattern)
Reports & references
- MITRE ATT&CK — S1103 (report)
- research.checkpoint.com — New Wormable Android Malware Spreads By Creating Auto Replies To Messages In Whatsapp (report)