I'm using these indicators with MVT and they are very helpful! These indicators work well for detecting potential surveillance/stalkerware software links in chat and browser history but I've realized that they don't detect that these flagged apps are actually installed.
My process now is to check manually for risky apps if we see an alert for one of these domains. It would be great to collect and add the application names for relevant iOS apps to this IOC list. Here are two examples from Life360 an FindMyKids.
com.wheremychildren.ios
com.life360.safetymap
Thanks for your working putting this IOC list together!
I'm using these indicators with MVT and they are very helpful! These indicators work well for detecting potential surveillance/stalkerware software links in chat and browser history but I've realized that they don't detect that these flagged apps are actually installed.
My process now is to check manually for risky apps if we see an alert for one of these domains. It would be great to collect and add the application names for relevant iOS apps to this IOC list. Here are two examples from Life360 an FindMyKids.
Thanks for your working putting this IOC list together!