Trusted Design

Android Malware Targeting Journalists

概要

In recent weeks, Iranian groups have increased their use of Android malware in order to compromise foreign journalists and political activists focused on the country. These incidents have involved the use of fictitious personas and compromised accounts in order to turn on others. Alongside Android malware, the group uses a familiar tactic of sending fake login pages for Facebook, Google, Yahoo and Microsoft in order to obtain account credentials through phishing. Finally, while two factor authentication (2FA) remains a critical resource to protect accounts, an observed compromised further highlights the need to move away from using the text message method onto Google Authenticator.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• Android banking malware masquerades as Flash Player (score: 0.70)
• Android banking trojan as Flash Player and bypasses 2FA (score: 0.68)
• Trojan-Banker.AndroidOS.Faketoken follow-up (score: 0.66)
• ZBot Malware (score: 0.66)
• London Calling: Two-Factor Authentication Phishing From Iran (score: 0.65)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る