SYMBOLCOMMON_NAMEaka. SYNONYMS

Domestic Kitten  (Back to overview)

aka: APT-C-50, Bouncing Golf

An extensive surveillance operation targets specific groups of individuals with malicious mobile apps that collect sensitive information on the device along with surrounding voice recordings. Researchers with CheckPoint discovered the attack and named it Domestic Kitten. The targets are Kurdish and Turkish natives, and ISIS supporters, all Iranian citizens.

Associated Families
apk.furball
References
2022-10-20 ⋅ Bleeping Computer ⋅ Bill Toulas
Hacking group updates Furball Android spyware to evade detection
FurBall
2021-02-08 ⋅ Checkpoint ⋅ Check Point Research
Domestic Kitten – An Inside Look at the Iranian Surveillance Operations
FurBall Domestic Kitten
2019-11-18 ⋅ ⋅ Qianxin ⋅ Red Raindrop Team
Surprised by Julius the Great! Disclosure of Cyrus attacks against Iran
FurBall
2019-10-02 ⋅ Virus Bulletin ⋅ Aseel Kayal, Lotem Finkelstein
Domestic Kitten: an Iranian surveillance program
FurBall
2019-06-18 ⋅ Trend Micro ⋅ Ecular Xu, Grey Guo
Mobile Campaign ‘Bouncing Golf’ Affects Middle East (IoCs)
FurBall
2019-06-18 ⋅ Trend Micro ⋅ Ecular Xu, Grey Guo
Mobile Campaign ‘Bouncing Golf’ Affects Middle East
FurBall Domestic Kitten
2018-09-07 ⋅ Bleeping Computer ⋅ Ionut Ilascu
Domestic Kitten APT Operates in Silence Since 2016
FurBall Domestic Kitten
Credits: MISP Project