Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-06 03:14:34 UTC
Home > List all groups > List all tools > List all groups using tool ExoBotCompact
 Tool: ExoBotCompact
Names
ExoBotCompact
Coper
Octo
Octo2
Category Malware
Type Banking trojan, Info stealer, Credential stealer, Botnet
Description
(ThreatFabric) On January 23, 2022, ThreatFabric analysts spotted a post on one of the darknet
forums, in which a member was looking for Octo Android botnet. Further analysis, as it will be
shown in this blog, uncovered a direct connection between Octo and ExobotCompact: in fact,
ExobotCompact was updated with several features and rebranded to Octo.
Information
<https://threatfabric.com/blogs/octo-new-odf-banking-trojan.html>
<https://www.threatfabric.com/blogs/octo2-european-banks-already-under-attack-by-new-malware-variant>
Malpedia <https://malpedia.caad.fkie.fraunhofer.de/details/apk.coper>
Last change to this tool card: 23 October 2024
Download this tool card in JSON format
All groups using tool ExoBotCompact
Changed Name Country Observed
Unknown groups
  _[ Interesting malware not linked to an actor yet ]_  
1 group listed (0 APT, 0 other, 1 unknown)
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=f63ac450-fcb3-421d-866a-1dccb2db15aa
Page 1 of 2

Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=f63ac450-fcb3-421d-866a-1dccb2db15aa
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=f63ac450-fcb3-421d-866a-1dccb2db15aa
Page 2 of 2

Unknown groups _[ Interesting malware not linked to an actor yet ]_
1 group listed (0 APT, 0 other, 1 unknown) 
   Page 1 of 2