NoxPlayer
- Malware type
- spyware
- Family
- Malware family
- Profile updated
- 2026-07-07 13:04:28
Context
NoxPlayer is an Android emulator that was targeted by threat actors due to vulnerabilities in its software update mechanism, allowing them to deliver malicious payloads to users. It was primarily exploited to spy on users.
Detection coverage
- 1 YARA rules
Detection rules
- MALPEDIA_Win_Noxplayer_Auto (yara-rule)
Reports & references
- ESET — Operation Nightscout Supply Chain Attack Online Gaming Asia (report)
- ics-cert.kaspersky.com — Kaspersky Ics Cert Apt Attacks On Industrial Organizations In H1 2021 En (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Noxplayer (report)