Dark Caracal APT Group (G0070): Mobile-Centric Espionage and Regional Surveillance

This report profiles Dark Caracal (G0070) as a nation‑state aligned APT that conducts long‑term, mobile‑centric espionage primarily via trojanized Android applications and social engineering. It details the group's targeting (government, military, journalists, activists), data collection capabilities (calls, SMS, GPS, audio, photos, documents), C2 practices, operational history, geographic focus (Middle East, North Africa, regional Europe/Asia), and provides defensive recommendations centered on user education and mobile security controls.