MalwareJul 22, 2026
Fake Bahrain Alert App Deploys Android Surveillance Malware
Fake Bahrain alert app deploys Android surveillance malware via phony Google Play sites.
Vendor Watch
Run Android?
Get an email when a reviewed story names Android, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch works
Summary
A new Android surveillance malware campaign has been uncovered, masquerading as a legitimate Bahrain government alert application. The malware is distributed through fake Google Play Store websites, designed to exploit user fear during periods of geopolitical tension, such as Iranian missile strikes. The spyware employs a four-stage infection process to exfiltrate sensitive data from compromised devices.
Indicators of Compromise
- malware — Android spyware
Entities
unknown (threat_actor)Bahrain alert app campaign (campaign)Android (product)