DoNot Team Linked to New Tanzeem Android Malware Targeting Intelligence Collection

Summary: The DoNot Team has developed a new Android malware named Tanzeem, designed for targeted cyber attacks against specific individuals or groups. The malware masquerades as a chat application but fails to function, instead facilitating intelligence gathering through various malicious activities. This development highlights the group’s evolving tactics, including the abuse of push notifications to deploy additional malware.

Threat Actor: DoNot Team | DoNot Team
Victim: Unknown | unknown victim

Keypoints :

• The malware Tanzeem is linked to targeted cyber attacks and is believed to be of Indian origin.
• It uses OneSignal to send phishing notifications, leading to further malware deployment.
• The app requests extensive permissions to collect sensitive data, including call logs, contacts, and location information.