Iran-linked group caught hiding surveillance tools in fake apps
- Recorded Future found an Iran-linked group spreading spyware
- The malware is delivered through fake VPN and media player apps
- Researchers assess that most targets are Iranian users
A new report from Recorded Future's Insikt Group describes a campaign that inverts the whole point of a privacy tool: fake VPN apps built specifically to spy on the people who install them.
Researchers have linked fresh infrastructure to an Iran-nexus threat cluster they track as TAG-182, which is using fake VPN and media player downloads to allegedly deliver a surveillance tool called MarkiRAT. The group is "highly likely" to be targeting Iranians living inside and outside the country, the report says.
It's a blunt reminder that choosing one of the best VPN services is a lot more secure than downloading free, unvetted tools.
Fake apps, real surveillance
Insikt Group identified a cluster of attacker-controlled domains allegedly used to stage downloads of...
Copyright of this story solely belongs to techradar.com. To see the full text click HERE
