logo

Spyware Campaign Impersonates Emergency Alert App to Target Mobile Users

ID: 166387f6-53a9-5f8a-aac0-50f13fc97b25

STIX ID: report--166387f6-53a9-5f8a-aac0-50f13fc97b25

Feed Name: Zimperium Blog

Threat Score
70/100

Date Published: 2026-03-23

Date Updated: 2026-05-01

...
...

Researchers uncovered a mobile spyware campaign distributing a trojanized version of Israel’s “Red Alert” Android app via SMS messages that impersonate official emergency alerts. The malicious app preserves legitimate alert features to appear trustworthy while covertly harvesting SMS, contacts, location, and installed-app data and sending it to attacker-controlled servers, demonstrating exploitation of public trust in emergency services.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.