Technique
technique:trojanized_applications
Also: trojanized apps
Malicious copies of legitimate applications that retain their normal functionality while spying on the user.
Malicious copies of legitimate applications that retain their normal functionality while spying on the user.
“these were all, in addition to being spyware, working versions of the app still”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | USES | Dark Caracal | Explicit | 38 |
| incoming | INVOLVES | Dark Caracal | Explicit | 38 |
Dark Caracal USES Trojanized applications
The mobile malware masqueraded as Trojanized copies of legitimate encrypted-messaging applications.
Explicit Confidence 99% · Cooper Quinton EP 38 Details
“The malware is disguised as copies of WhatsApp, Signal, Telegram, Tor, and Threema.”
Dark Caracal INVOLVES Trojanized applications
The campaign used Trojanized applications that remained functional while spying on victims in the background.
Explicit Confidence 99% · Cooper Quinton EP 38 Details
“these were all, in addition to being spyware, working versions of the app still.”