- Category
- Targeted, sponsor unknown · Targeted intrusions with no sponsor attributed.
- Origin
- Unknown
- Sources
- 3 sources carry it
- Identifier
- GINC-APT-0663 · caracal-kitten
What it is
Caracal Kitten is an APT group that has been targeting activists associated with the Kurdistan Democratic Party. They employ a mobile remote access Trojan to gain unauthorized access to victims' devices. The group disguises their malware as legitimate mobile apps, tricking users into installing them and granting the hackers access to their personal data.
Names
The names each vendor, agency and source gives it. Naming differs by who tracks the actor, so one group carries many.
- QiAnXin
- APT-Q-58
Tools
The tools and malware families the sources tie to it.
- MobileOrder
- Remote Utilities
- RemoteCMD
- RemotePC
- Trojan.Karagany
- Trojan.Mebromi
Sources
- Malpedia malpedia.caad.fkie.fraunhofer.de