Fake Bahrain Alert App Deploys Android Surveillance Malware

Summary

A new Android surveillance malware campaign has been uncovered, masquerading as a legitimate Bahrain government alert application. The malware is distributed through fake Google Play Store websites, designed to exploit user fear during periods of geopolitical tension, such as Iranian missile strikes. The spyware employs a four-stage infection process to exfiltrate sensitive data from compromised devices.

Indicators of Compromise

• malware — Android spyware

Entities