{
	"id": "d4a6ab7b-ce68-45cb-8c8d-63e61addd136",
	"created_at": "2026-04-06T00:17:47.179925Z",
	"updated_at": "2026-04-10T03:31:36.783349Z",
	"deleted_at": null,
	"sha1_hash": "fb20d319e9f6e8aef8a6897a625c7c5b4942a30e",
	"title": "TemptingCedar Spyware (Malware Family)",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 31965,
	"plain_text": "TemptingCedar Spyware (Malware Family)\r\nBy Fraunhofer FKIE\r\nArchived: 2026-04-05 17:04:48 UTC\r\napk.tempting_cedar (Back to overview)\r\nTemptingCedar Spyware\r\nTempting cedar spyware is an Android spyware campaign, active since at least 2015, that used social engineering\r\nvia fake, attractive Facebook profiles to trick victims into downloading malware. The spyware was designed to\r\nsteal a wide range of sensitive personal data.\r\nReferences\r\n2018-02-21 ⋅ Avast ⋅ Threat Intelligence Team\r\nAvast tracks down Tempting Cedar Spyware\r\nTemptingCedar Spyware\r\nThere is no Yara-Signature yet.\r\nSource: https://malpedia.caad.fkie.fraunhofer.de/details/apk.tempting_cedar\r\nhttps://malpedia.caad.fkie.fraunhofer.de/details/apk.tempting_cedar\r\nPage 1 of 1",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"references": [
		"https://malpedia.caad.fkie.fraunhofer.de/details/apk.tempting_cedar"
	],
	"report_names": [
		"apk.tempting_cedar"
	],
	"threat_actors": [
		{
			"id": "8aa5e5a6-87dd-4700-b5a2-11e08218132e",
			"created_at": "2022-10-25T16:07:24.316497Z",
			"updated_at": "2026-04-10T02:00:04.933194Z",
			"deleted_at": null,
			"main_name": "Tempting Cedar Spyware",
			"aliases": [],
			"source_name": "ETDA:Tempting Cedar Spyware",
			"tools": [
				"Tempting Cedar Spyware",
				"TemptingCedar Spyware"
			],
			"source_id": "ETDA",
			"reports": null
		}
	],
	"ts_created_at": 1775434667,
	"ts_updated_at": 1775791896,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/fb20d319e9f6e8aef8a6897a625c7c5b4942a30e.pdf",
		"text": "https://archive.orkl.eu/fb20d319e9f6e8aef8a6897a625c7c5b4942a30e.txt",
		"img": "https://archive.orkl.eu/fb20d319e9f6e8aef8a6897a625c7c5b4942a30e.jpg"
	}
}