Massive offers monetization SDK’s to developers to put in their Android app and Windows programs. This SDK will use the user’s internet connection as a proxy, in the past it used to mine cryptocurrency on the user’s pc too.
It seems like they use several subdomains under the joinmassive.com domain for C&C, but just to be safe I think it’s better to block *.joinmassive.com.
Thank you for your support. The domain(s) has/have been added to the denylist and will be added with the next full release at the latest. A full release is usually performed every 24 hours.
Which domain(s) should be blocked?
joinmassive.com api.joinmassive.com geo-network.joinmassive.com network.joinmassive.com
Why should these domain(s) be blocked?
Massive offers monetization SDK’s to developers to put in their Android app and Windows programs. This SDK will use the user’s internet connection as a proxy, in the past it used to mine cryptocurrency on the user’s pc too.
It seems like they use several subdomains under the joinmassive.com domain for C&C, but just to be safe I think it’s better to block *.joinmassive.com.
Their site advertises these services: https://joinmassive.com
This video features a deep dive into a program which uses the Massive SDK: https://youtu.be/_Q_F04Wd23k
Privacy