Hamas Android Malware On IDF Soldiers-This is How it Happened

[[correlate]]

Content source

https://research.checkpoint.com/2020/hamas-android-malware-on-idf-soldiers-this-is-how-it-happened/?fbclid=IwAR1tfr0cfiJsd4cD6QxOrjdPwChYmJWxDQYi6JSuGGQsrIBllkxosRao2t0

This MRAT (Mobile Remote Access Trojan) is disguised as a set of dating apps, “GrixyApp”, “ZatuApp”, and “Catch&See”, all with dedicated websites, and descriptions of dating applications.

The victims received a link to download the malicious application from a Hamas operator disguising themselves as an attractive woman. Once the application is installed and executed, it shows an error message stating that the device is not supported, and the app will uninstall itself – which actually does not happen, and the app only hides its icon.

Hamas Android Malware On IDF Soldiers-This is How it Happened - Check Point Research

Introduction: Earlier today, IDF’s spokesperson revealed that IDF (Israel Defense Force) and ISA (Israel Security Agency AKA “Shin Bet”) conducted a joint operation to take down a Hamas operation targeting IDF soldiers, dubbed ‘Rebound’. In this article, we will describe the capabilities and...

research.checkpoint.com

 

[Outpost]

Two observations:
1) How is it possible that IDF soldiers were allowed to use a personal smartphone while on duty? In a delicate situation like the one in which those specific soldiers operate, ISA should not have allowed the use of unsafe smartphones.
2) If the phones used were provided by the IDF, how was it possible to install third-party apps (regardless of whether they contained malware or not)?

 

[[correlate]]

Two observations:
1) How is it possible that IDF soldiers were allowed to use a personal smartphone while on duty? In a delicate situation like the one in which those specific soldiers operate, ISA should not have allowed the use of unsafe smartphones.
2) If the phones used were provided by the IDF, how was it possible to install third-party apps (regardless of whether they contained malware or not)?

Important questions
I do not know what kind of protection the members of the Israeli army were receiving
It may be the use of a personal side phone
They were previously hacked in the same way.