Mantax Otax Android Malware - C2 Domain apimantax.otax.fun via TLS SNI

Arnold Chan@slaz

•updated Sep 10, 2026•0•0•3

Detects network activity associated with the Mantax/Otax Android malware family, specifically identifying C2 communication to the domain apimantax.otax.fun via TLS SNI and HTTP host headers, as well as potential dynamic C2 configuration retrieval via GitHub using the OkHttp client.