Researchers catch Yemeni hackers spying on Middle East military phones

Researchers from Lookout identified a Houthi-linked Android surveillance campaign called GuardZoo (a Dendroid-derived RAT) that since 2019 has infected more than 450 phones across Yemen and several neighboring countries. The spyware, delivered via WhatsApp social engineering and direct browser downloads using military- and religious-themed lures, exfiltrates photos, documents and location-related files and appears targeted at military personnel and related interests.