ESET Research: Arid Viper group targets Middle East, poisons Palestinian app with spyware

ESET researchers have identified five campaigns that employ trojanised apps to target Android users. Most likely carried out by the Arid Viper APT group, these campaigns started in 2022, and three of them are still ongoing at the time of publication of this press release. They deploy multistage Android spyware, which ESET has named AridSpy, … More ESET Research: Arid Viper group targets Middle East, poisons Palestinian app with spyware

Stealth Falcon preying over Middle Eastern skies with Deadglyph

ESET researchers have discovered Deadglyph, a sophisticated backdoor used by the Stealth Falcon group for espionage in the Middle East. For years, the Middle East has maintained its reputation as a fertile ground for advanced persistent threats (APTs). In the midst of routine monitoring of suspicious activities on the systems of high-profile customers, some based … More Stealth Falcon preying over Middle Eastern skies with Deadglyph

ESET Research uncovers APT-C-23 group’s new Android spyware masked as Threema and Telegram

ESET researchers uncover a new version of Android spyware used by the APT-C-23 threat group against targets in the Middle East. ESET researchers have analyzed a new version of Android spyware used by APT-C-23, a threat group active since at least 2017 that is known for mainly targeting the Middle East. The new spyware, detected … More ESET Research uncovers APT-C-23 group’s new Android spyware masked as Threema and Telegram

ESET discovers a chat app spying on users and leaking stolen data

ESET researchers have discovered a new operation within a long-running cyber-espionage campaign in the Middle East, apparently with links to the threat actor group known as Gaza Hackers, or Molerats. Instrumental in the operation is an Android app, Welcome Chat, which serves as spyware while also delivering the promised chatting functionality. The malicious website promoting … More ESET discovers a chat app spying on users and leaking stolen data

ESET discovered an undocumented backdoor used by the infamous Stealth Falcon group

ESET researchers discovered a backdoor linked to malware used by the Stealth Falcon group, an operator of targeted spyware attacks against journalists, activists and dissidents in the Middle East. Stealth Falcon is a threat group, active since 2012, that targets political activists and journalists in the Middle East. It has been tracked by the Citizen Lab, … More ESET discovered an undocumented backdoor used by the infamous Stealth Falcon group