Israel: RedAlert Spyware Campaign Exploits Wartime Panic With Trojanized App

**Executive Summary:** A sophisticated mobile espionage campaign is distributing a trojanized version of Israel’s Red Alert rocket-warning app via SMS phishing and sideloading; the multi-stage Android spyware spoofs the legitimate app, requests dangerous permissions (SMS, contacts, precise GPS), persistently harvests and stages data locally, and exfiltrates it to attacker-controlled infrastructure (observed C2: api.ra-backup.com through AWS/Cloudflare).