Advanced Persistent Threat group

Sourced from Republic Title A new kind of Android spyware has been distributed by Transparent Tribe, a prolific APT group, under the guise of official COVID-19 applications – according to Kaspersky researchers. The threat actors have capitalised on the pandemic to extend their operations and infect mobile devices. Recent findings show that the group has been actively working on improving its toolset and expanding its reach to include threats to mobile devices. During the investigation, Kaspersky was able to find a new Android implant used by the threat actor to spy on mobile devices in attacks, which was distributed as fake national COVID-19 tracking apps. The connection between the group and the two applications was made thanks to the related domains that the actor used to host malic...