GuardZoo Malware Strikes: Middle East Military Personnel Under Threat!

Middle Eastern military personnel are caught in the crosshairs of a surveillanceware operation using GuardZoo, an Android data-gathering tool. Launched by a Houthi-aligned threat actor, GuardZoo has infected over 450 victims since October 2019, primarily in Yemen. The malware, a souped-up Dendroid RAT, spreads via…

Hot Take:

Who knew that the latest “zoo” attraction would involve military-grade surveillance and malware instead of exotic animals? GuardZoo has certainly got us all on wild safari!

Key Points:

  • GuardZoo is a modified version of the Dendroid RAT, a notorious Android malware.
  • More than 450 victims, primarily in Yemen, have been affected since the campaign started in October 2019.
  • The malware is distributed through WhatsApp and direct browser downloads with enticing military and religious-themed apps.
  • GuardZoo’s Command and Control (C2) infrastructure uses dynamic DNS domains registered to YemenNet.
  • The malware supports over 60 commands, making it a Swiss Army knife of digital espionage tools.

Membership Required

 You must be a member to access this content.

View Membership Levels
Already a member? Log in here