Tag
high
threat
ScarCruft (APT37) Deploying BirdCall Android Backdoor via Compromised Game Platform
2 rules 5 TTPs 1 IOCThe APT37 group (ScarCruft) is distributing an Android version of the BirdCall backdoor via a supply-chain attack targeting a Chinese video game platform, sqgame[.]net, to collect sensitive information from users.
Google Play +2
ScarCruft
android
malware
spyware
apt37
supply-chain
2r
5t
1i
critical
advisory
ToTok iOS Application Used for Government Surveillance
2 rules 2 TTPs 2 IOCsThe ToTok iOS application, developed by Breej Holding Ltd., was identified as a spying tool used by the government of the United Arab Emirates (UAE) to track users' conversations, movements, and relationships by collecting sensitive user data and transmitting it to servers using self-signed certificates.
ToTok +1
spyware
ios
surveillance
2r
2t
2i