GuardZoo Malware Strikes: Middle East Military Personnel Under Threat!
Middle Eastern military personnel are caught in the crosshairs of a surveillanceware operation using GuardZoo, an Android data-gathering tool. Launched by a Houthi-aligned threat actor, GuardZoo has infected over 450 victims since October 2019, primarily in Yemen. The malware, a souped-up Dendroid RAT, spreads via WhatsApp and browser downloads.
Hot Take:
Who knew that the latest “zoo” attraction would involve military-grade surveillance and malware instead of exotic animals? GuardZoo has certainly got us all on wild safari!
Key Points:
- GuardZoo is a modified version of the Dendroid RAT, a notorious Android malware.
- More than 450 victims, primarily in Yemen, have been affected since the campaign started in October 2019.
- The malware is distributed through WhatsApp and direct browser downloads with enticing military and religious-themed apps.
- GuardZoo’s Command and Control (C2) infrastructure uses dynamic DNS domains registered to YemenNet.
- The malware supports over 60 commands, making it a Swiss Army knife of digital espionage tools.
Already a member? Log in here