Ding-You Hsiao
Last known affiliation: Taiwan National Computer Emergency Response Team
Date: 2019-12-04
An Android Botnet Analysis – Shaoye Botnet
Min-Chun Tsai 🗣 | Jen-Ho Hsiao 🗣 | Ding-You Hsiao 🗣
Min-Chun Tsai 🗣 | Jen-Ho Hsiao 🗣 | Ding-You Hsiao 🗣
Abstract (click to view)
The action of Shaoye botnet started from June 2017. The peak of attacks was seen in January 2018. TWNCERT (Taiwan National Computer Emergency Response Team) received the intelligence about a DNS hijack from Japan NICT (National Institute of Information and Communications Technology) in March 2018. The intelligence indicated that the setting of home routers in Japan had been changed by hackers. Rogue DNS IP was from Taiwan. If user surfed the internet through the hijacked router, he or she will be led to download site which contains malicious APK…
