Files
autarch/data/ioc/stalkerware/watchware.yaml

351 lines
6.8 KiB
YAML

- name: WiseMo
names:
- WiseMo
type: watchware
packages:
- com.wisemo.host.v10
certificates:
- 9B48840CBF93379410172B4B85989624D2B33D59
websites:
- wisemo.com
- www.wisemo.com
c2:
domains:
- mycloud1.wisemo.com
- mycloud.wisemo.com
- mtracker.fortess.net
- mycloud-cs10.wisemo.com
- mycloud-cs17.wisemo.com
- mycloud-cs17a.wisemo.com
- mycloud-cs5a.wisemo.com
- mycloud-cs9.wisemo.com
- name: FamiSafe
type: watchware
packages:
- com.wondershare.famisafe
- com.wondershare.famisafe.kids
certificates:
- 61B90229F79F730043D06FEE46BB8FD9E3A0E70B
- 095514BA4F28DBE521C74ABF77972BE3C86A50A5
websites:
- famisafe.wondershare.com
- famisafeapp.wondershare.com
- accounts.wondershare.com
c2:
domains:
- 300624.com
- analytics.300624.com
- api.wondershare.cc
- app-api-pro.wondershare.cc
- data-api.famisafe.com
- dc.wondershare.cc
- famisafe-b6807.firebaseio.com
- sparrow.wondershare.com
- name: KasperskySafeKids
type: watchware
packages:
- com.kaspersky.safekids
c2:
domains:
- kaspersky-safe-kids.firebaseio.com
- name: KidsControl
type: watchware
packages:
- app.gpsme
websites:
- kid-control.com
- kid-control.ru
c2:
domains:
- api.kid-control.com
- beta.kid-control.com
- ios.kid-control.com
- go.kid-control.com
- go2.kid-control.com
- gpsme1.kid-control.com
- s.kid-control.com
- s4.kid-control.com
- s5.kid-control.com
- s6.kid-control.com
- s7.kid-control.com
- s8.kid-control.com
- s9.kid-control.com
- s10.kid-control.com
- name: FindMyKids
type: watchware
packages:
- org.findmykids.app
ios_bundles:
- com.wheremychildren.ios
certificates:
- 2A57777E3B9491A37392AFCE2E69D030DBF95037
websites:
- findmykids.org
- discount.findmykids.org
c2:
domains:
- r.findmychilds.org
- wss.findmychilds.org
- where-is-my-children.firebaseio.com
- name: Accountable2you
type: watchware
packages:
- com.accountable2you.ap1
certificates:
- 78CFFA689DD23FDD7E84DDFBF28F86D4843C6129
websites:
- accountable2you.com
c2:
domains:
- accountable2you.com
- webservice.accountable2you.com
- accountable2you-android.firebaseio.com
- api.accountable2you.com
- name: ZoeMob
type: watchware
packages:
- com.zoemob.gpstracking
certificates:
- F9761F7C7AA6317B667671CB8F66479970630EAD
websites:
- www.zoemob.com
- zoemob.com
- panel.zoemob.com
c2:
domains:
- apis.zoemob.com
- zoemob.firebaseio.com
- name: Life360
type: watchware
packages:
- com.life360.android.safetymapd
ios_bundles:
- com.life360.safetymap
certificates:
- 19C0868F028757F49FD8F7BDF39FF70C771D622B
websites:
- www.life360.com
- life360.com
- life360-wordpress.s3.amazonaws.com
- life360.zendesk.com
c2:
domains:
- gpi4.life360.com
- life360-dev.tile-api.com
- life360.atlassian.net
- life360-location-dev.tile-api.com
- gpi3.life360.com
- i.lf360.co
- gpi4.dev.life360.com
- life360feedback.typeform.com
- api-cloudfront.life360.com
- life360-com-l360safetycenter.firebaseio.com
- name: MicrosoftFamilySafe
type: watchware
packages:
- com.microsoft.familysafety
websites:
- family.microsoft.com
c2:
domains:
- location.family.microsoft.com
- mobileaggregator.family.microsoft.com
- safedriving.family.microsoft.com
- name: GeoZilla
type: watchware
packages:
- com.geozilla.family
certificates:
- EE74E09E40A324B806AE5ED68A4543E50C3B6FC2
websites:
- geozilla.com
- geozillahelp.zendesk.com
c2:
domains:
- api.geozilla.com
- files.geozilla.com
- geozilla.autosmartins.com
- geozillafamily-c92d0.firebaseio.com
- geozillafamily.firebaseio.com
- iot.geozilla.com
- name: KidsLox
type: watchware
packages:
- com.kidslox.app
certificates:
- 4BBD8F7E244B86B6B82F2A343EE8EDB5E797FEF8
websites:
- kidslox.com
- kidsloxsupport.zendesk.com
- www.advanced.kidslox.com
c2:
domains:
- kidslox.page.link
- kidslox.firebaseio.com
- activity.kdlparentalcontrol.com
- admin.kdlparentalcontrol.com
- name: FamiShield
names:
- Mitbe
type: watchware
packages:
- com.USIB.Child.ChildControl
certificates:
- 4598FFB867E28560BC1198D61EC83A1CCA0F1612
websites:
- famishield.usibtheteam.com
c2:
domains:
- parental-control-d4a98-default-rtdb.asia-southeast1.firebasedatabase.app
- name: Qustodio
type: watchware
websites:
- qustodio.com
- www.qustodio.com
packages:
- com.qustodio.qustodioapp
ios_bundles:
- com.qustodio.par.qustodio-family-parental-control-app
- com.qustodio.mdm.app.family.pro
- name: ScreenTime
type: watchware
websites:
- screentimelabs.com
packages:
- com.screentime.rc
ios_bundles:
- com.screentime
- name: MMGuardian
type: watchware
packages:
- com.mmguardian.parentapp
- com.mmguardian.tabletsecurity
- com.mmguardian.childapp
certificates:
- 842933609E604063B55C04BBB47763AC7C0FC327
websites:
- www.mmguardian.com
- mmguardian.com
- family.mmguardian.com
- name: FlareFamilyLocator
type: watchware
packages:
- com.probit.flare
- name: FamilyOrbit
type: watchware
websites:
- familyorbit.com
- www.familyorbit.com
c2:
domains:
- www.familyorbit.com
- www.familyorbit.net
packages:
- com.familyorbit.child
certificates:
- DB8DF9C3D6524B298F3EAD22E6A77D7FB2F1003A
- name: Trulpe
type: watchware
websites:
- truple.io
- app.truple.io
packages:
- com.camhart.netcountable
- name: Boomrang
type: watchware
websites:
- useboomerang.com
packages:
- com.nationaledtech.Boomerang
certificates:
- E6157A76E1DCF43159529212009A0AA335499B7D
- name: MobileFence
type: watchware
websites:
- www.mobilefence.com
- mobilefence.com
packages:
- com.mobilefence.family
- name: Kidgy
type: watchware
websites:
- kidgy.com
packages:
- com.parental.control.kidgy
- name: Kiddoware
type: watchware
websites:
- kiddoware.com
packages:
- com.kiddoware.kidsplace
- name: Netnanny
type: watchware
websites:
- www.netnanny.com
- netnanny.com
packages:
- com.contentwatch.ghoti.cp2.child
ios_bundles:
- com.contentwatch.ghoti.cp2.parent
distribution:
- install.netnanny.com
c2:
domains:
- parent.netnanny.com
- name: SeekDroid
type: watchware
websites:
- seekdroid.com
packages:
- org.gtmedia.seekdroid
- name: LockItTight
type: watchware
websites:
- www.lockittight.com
- lockittight.com
packages:
- com.timeon.litclient
- name: SafeNet
type: watchware
websites:
- safenet.family
packages:
- com.cisai.safenetchild
certificates:
- 7F0D7ED5D614B03962014483E654A215A40F029F
c2:
ips:
- 103.10.24.124
- name: Discovenger
type: watchware
websites:
- discovenger.com
packages:
- com.discovenger.app