News

New Variants Of Android Spyware Are Targeting Middle East Users

Sophos recommends Android users to never install apps from untrusted sources and avoid ignoring available OS and app updates.

Published

3 years ago

November 24, 2021

David Morelo

new variants of android spyware are targeting middle east users

British security software and hardware company Sophos has recently revealed that new variants of Android spyware used by the C-23 group are actively targeting users in the Middle East.

C-23, also known as GnatSpy, FrozenCell, or VAMP, is what cybersecurity professionals refer to as an advanced persistent threat (APT) adversary. Such adversaries are typically well-funded and well-organized, which allows them to quickly evolve their tactics to overcome even the most sophisticated cybersecurity defenses.

The C-23 adversary has been known for targeting individuals in the Middle East since at least 2017, with a particular focus on the Palestinian territories.

The latest variants of its Android spyware are most likely distributed via a download link sent to victims as text messages. The link leads to a malicious app that pretends to install legitimate updates on the victim’s mobile device. When the app is launched for the first time, it requests a number of permissions that let it spy on the victim. It then disguises itself to make removal more difficult.

c-23 gnatspy frozencell vamp android spyware middle east

“The new variants use more, and more varied, disguises than previous versions, hiding behind popular app icons such as Chrome, Google, Google Play, YouTube, or the BOTIM voice-over-IP service” explain Sophos. “If targets click a fraudulent icon, the spyware launches the legitimate version of the app, while maintaining surveillance in the background”.

Also Read: Dubai Establishes $272 Million Future District Fund To Attract Tech Companies

The information the new spyware can steal includes everything from text messages to the names of installed apps to contacts from all kinds of apps, including Facebook and WhatsApp. The spyware can even dismiss notifications and toggle “Do Not Disturb” settings.

Sophos recommends Android users to never install apps from untrusted sources and avoid ignoring available OS and app updates. The company’s own mobile antivirus app, called Sophos Intercept X for Mobile, can detect the new spyware as well as all kinds of other malicious software.

News

Truecaller For iPhone Gets Real-Time Caller ID And Auto Spam Blocking

The latest update integrates with Apple’s Live Caller ID Lookup framework, launched with iOS 18 last year.

Published

3 hours ago

January 23, 2025

Nour Nasir

Truecaller

Truecaller has rolled out a major update for iPhone users, introducing API support that brings real-time caller identification and automatic spam blocking. The upgrade aims to bring the iOS version of the app closer to its Android counterpart, which has long offered these advanced call-screening features.

The latest update integrates with Apple’s Live Caller ID Lookup framework, launched with iOS 18 last year. The technology allows third-party apps to cross-check incoming calls against a database of known spam numbers in real-time. Importantly, the process employs “homomorphic encryption,” ensuring user privacy by masking the caller’s number, concealing the client’s IP address, and using anonymous authentication.

With this update, Truecaller has also introduced global automatic spam call blocking for iPhones. However, the real-time caller ID feature is being released gradually and is available only to Truecaller Premium subscribers on iPhones running iOS 18.2 or later. Free users will still have access to ad-supported features, such as manual number searches and caller identification for verified businesses.

How To Enable The New Features

To activate the new features, follow these steps:

Update the Truecaller app to version 14.0 or newer via the App Store.
Go to Settings > Apps > Phone > Call Blocking & Identification on your iPhone.
Turn on all Truecaller toggles, then restart the app.

Also Read: “AI Seal” Certification Now Required For Dubai Gov Partnerships

While these features are new to iOS, Truecaller has hinted at this update for months. Following Apple’s iOS 18 update and the introduction of its Live Caller ID API last September, Truecaller Co-founder Alan Mamedi shared his excitement on X (formerly Twitter), saying, “Truecaller finally works on iPhone”.

The global rollout of spam call blocking is already live, but users may need to wait for gradual access to the live caller ID feature.