Exodus

aliases

Last seen:Mar 17, 2026

Intelligence Profile

Malware family tracked by Malpedia. ID: apk.exodus

Threat Analysis

Exodus is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

Intelligence Reports Mentioning Exodus

One-Character Linux Kernel Flaw Enables Local Root Access, Exploits Now Public

The Hacker News· Jun 8, 2026

External References

→https://motherboard.vice.com/en_us/article/43z93g/hackers-hid-android-malware-in-google-play-store-exodus-esurv

→https://motherboard.vice.com/en_us/article/eveeq4/prosecutors-investigation-esurv-exodus-malware-on-google-play-store

→https://securitywithoutborders.org/blog/2019/03/29/exodus.html

→https://ti.qianxin.com/uploads/2020/02/13/cb78386a082f465f259b37dae5df4884.pdf

Quick Facts

TypeAPT / Threat Group

Aliases2

Also Known As

apk.exodusExodus

External Intelligence

Malpedia: apk.exodus

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search Exodus