S0505 Desert Scorpion

malwareMobile

platformsAndroid

also known asDesert Scorpion

Desert Scorpion is surveillanceware that has targeted the Middle East, specifically individuals located in Palestine. Desert Scorpion is suspected to have been operated by the threat actor APT-C-23. There are multiple close variants of Desert Scorpion, such as VAMP, GnatSpy, FrozenCell and SpyC23, which add some additional functionality but are not significantly different from the original malware.

01

techniques used (17)

ATT&CK techniques this enables or maps to.

02

used by groups (1)

Threat groups associated with this.

03

source

Where this definition is published.

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan