Skip to content

S0321 HummingWhale

HummingWhale is an Android malware family that performs ad fraud. 1

Item Value
ID S0321
Version 1.0
Created 25 October 2017
Last Modified 24 October 2022
Navigation Layer View In ATT&CK® Navigator

Techniques Used

Domain ID Name Use
mobile T1643 Generate Traffic from Victim HummingWhale generates revenue by displaying fraudulent ads and automatically installing apps. When victims try to close the ads, HummingWhale runs in a virtual machine, creating a fake ID that allows the perpetrators to generate revenue.1