DONOT Group Deploys Malicious Android Apps in India

Cyfirma identified an ongoing DONOT Team (APT) campaign in which two fake Android chat apps, “Tanzeem” and “Tanzeem Update,” trick victims into enabling accessibility and other permissions, then stealthily exfiltrate call logs, contacts, messages, location and files and use push notifications to deploy additional payloads—indicating targeted intelligence gathering against individuals and organizations of interest in South Asia.