HummingWhale
HummingWhale is an Android malware family that performs ad fraud. [1]
ID: S0321
ⓘ
Type: MALWARE
Version: 1.0
Created: 25 October 2017
Last Modified: 25 April 2025
Techniques Used
| Domain | ID | Name | Use | |
|---|---|---|---|---|
| Mobile | T1643 | Generate Traffic from Victim |
HummingWhale generates revenue by displaying fraudulent ads and automatically installing apps. When victims try to close the ads, HummingWhale runs in a virtual machine, creating a fake ID that allows the perpetrators to generate revenue.[1] |
|