devman
- First seen
- 2015-01-01 00:00:00
- Malware type
- spyware, trojan
- Last IoC activity
- 2026-07-20 09:40:41
- Profile updated
- 2026-07-07 13:58:44
Targeted industries: government-and-public-sector financial-services
Context
Devman is a mobile malware targeting Android devices. It is known for covert data exfiltration and has been observed in various operations affecting government and financial sectors.
Reports & references
- ransomlook.io — Devman (report)
- medium.com — Devman Ransomware Analysis Of New Dragonforce Variant Ede707Fd30B1 (report)
- Broadcom/Symantec — Devman A New Dragonforce Ransomware Variant (report)
- watchguard.com — Devman (report)
- hivepro.com — Devman Ransomware Is A New Derivative Of The Dragonforce Family (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Devman (report)
- any.run — Devman Ransomware Analysis (report)
- gov.il — Alert Cert Il W 1907 (report)
- group-ib.com — Dragonforce Ransomware (report)