Marcher

aliases

Last seen:Mar 17, 2026

Intelligence Profile

Malware family tracked by Malpedia. ID: apk.marcher

Threat Analysis

Marcher is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→https://securelist.com/mobile-malware-evolution-2019/96280/

→https://www.clientsidedetection.com/exobot_v2_update___staying_ahead_of_the_competition.html

→https://www.proofpoint.com/us/blog/threat-insight/update-fake-updates-two-new-actors-and-new-mac-malware

→https://www.zscaler.de/blogs/research/android-marcher-continuously-evolving-mobile-malware

Quick Facts

TypeAPT / Threat Group

Aliases3

Also Known As

ExoBotMarcherapk.marcher

External Intelligence

Malpedia: apk.marcher

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search Marcher