Skip to content
Threat Feed
Subscribe

Tag

Spyware

4 briefs RSS
high advisory

Iranian State-Sponsored Espionage Campaign Utilizing CHOSEN BRICK Spyware

Iranian state-sponsored actors are targeting dissidents, activists, and journalists with the CHOSEN BRICK spyware, delivered via tailored social engineering on messaging platforms to facilitate surveillance and data exfiltration.

espionage spyware social-engineering surveillance
2t
high advisory

Malicious Packagist Composer Themes Deploying iOS Spyware

Threat actors are distributing 13 malicious Composer themes via Packagist to compromise streaming websites and deploy a WebKit-to-kernel exploit chain against iOS visitors for data exfiltration and cryptocurrency wallet theft.

iOS +1 supply-chain mobile-malware web-security cryptocurrency-theft spyware
4t 2c 1i
high threat

ScarCruft (APT37) Deploying BirdCall Android Backdoor via Compromised Game Platform

The APT37 group (ScarCruft) is distributing an Android version of the BirdCall backdoor via a supply-chain attack targeting a Chinese video game platform, sqgame[.]net, to collect sensitive information from users.

Google Play +2 ScarCruft android malware spyware apt37 supply-chain
2r 5t 1i
critical advisory

ToTok iOS Application Used for Government Surveillance

The ToTok iOS application, developed by Breej Holding Ltd., was identified as a spying tool used by the government of the United Arab Emirates (UAE) to track users' conversations, movements, and relationships by collecting sensitive user data and transmitting it to servers using self-signed certificates.

ToTok +1 spyware ios surveillance
2r 2t 2i