{"id":136615,"date":"2026-07-25T06:41:18","date_gmt":"2026-07-25T06:41:18","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2026\/07\/25\/iran-linked-group-caught-hiding-surveillance-tools-in-fake-apps\/"},"modified":"2026-07-25T06:42:21","modified_gmt":"2026-07-25T06:42:21","slug":"iran-linked-group-caught-hiding-surveillance-tools-in-fake-apps","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2026\/07\/25\/iran-linked-group-caught-hiding-surveillance-tools-in-fake-apps\/","title":{"rendered":"Iran-linked group caught hiding surveillance tools in fake apps"},"content":{"rendered":"<p> <a href=\"https:\/\/go.fiverr.com\/visit\/?bta=1052423&nci=17043\" Target=\"_Top\"><img loading=\"lazy\" decoding=\"async\" border=\"0\" src=\"https:\/\/fiverr.ck-cdn.com\/tn\/serve\/?cid=40081059\" loading=\"lazy\"  width=\"601\" height=\"201\"><\/a>\n<br \/><img decoding=\"async\" src=\"https:\/\/cdn.mos.cms.futurecdn.net\/z8Ysj7MUYeyK822yMiTepP-1200-80.jpg\" loading=\"lazy\" \/><\/p>\n<div id=\"article-body\">\n<hr id=\"elk-a28d3d94-8779-11f1-b7ec-839485050274\"\/>\n<ul id=\"elk-a28d3ec0-8779-11f1-90c3-d32546221377\">\n<li><strong>Recorded Future discovered an Iran-linked group spreading spy ware<\/strong><\/li>\n<li><strong>The malware is delivered by faux VPN and media participant apps<\/strong><\/li>\n<li><strong>Researchers assess that the majority targets are Iranian customers<\/strong><\/li>\n<\/ul>\n<hr id=\"elk-a28d3f42-8779-11f1-8d45-fbe2de6f8800\"\/>\n<p id=\"elk-a28d3fc4-8779-11f1-9942-29b84b450110\">A brand new report from <a data-analytics-id=\"inline-link\" href=\"https:\/\/www.recordedfuture.com\/research\/nexus-tag182-disseminates-markirat\" target=\"_blank\" rel=\"nofollow\" data-url=\"https:\/\/www.recordedfuture.com\/research\/nexus-tag182-disseminates-markirat\" referrerpolicy=\"no-referrer-when-downgrade\" data-hl-processed=\"none\" data-mrf-recirculation=\"inline-link\">Recorded Future&#8217;s Insikt Group<\/a> describes a marketing campaign that inverts the entire level of a privateness instrument: faux VPN apps constructed particularly to spy on the individuals who set up them.<\/p>\n<p>Researchers have linked recent infrastructure to an Iran-nexus risk cluster they monitor as TAG-182, which is utilizing faux VPN and media participant downloads to allegedly ship a surveillance instrument referred to as MarkiRAT. The group is &#8220;extremely seemingly&#8221; to be focusing on Iranians residing inside and out of doors the nation, <a data-analytics-id=\"inline-link\" href=\"https:\/\/assets.recordedfuture.com\/insikt-report-pdfs\/2026\/cta-ir-2026-0701.pdf\" target=\"_blank\" rel=\"nofollow\" data-url=\"https:\/\/assets.recordedfuture.com\/insikt-report-pdfs\/2026\/cta-ir-2026-0701.pdf\" referrerpolicy=\"no-referrer-when-downgrade\" data-hl-processed=\"none\" data-mrf-recirculation=\"inline-link\">the report says<\/a>.<\/p>\n<p><a id=\"elk-seasonal\"\/><\/p>\n<aside data-article-category=\"vpn\" data-block-type=\"embed\" data-render-type=\"fte\" data-skip=\"dealsy\" data-widget-type=\"seasonal\" class=\"hawk-root\"\/>\n<p id=\"elk-a28d3fc4-8779-11f1-9942-29b84b450110-2\">It is a blunt reminder that selecting one of many <a data-analytics-id=\"inline-link\" href=\"https:\/\/www.techradar.com\/vpn\/best-vpn\" target=\"_blank\" rel=\"nofollow\" data-url=\"https:\/\/www.techradar.com\/vpn\/best-vpn\" data-hl-processed=\"none\" data-mrf-recirculation=\"inline-link\" data-before-rewrite-localise=\"https:\/\/www.techradar.com\/vpn\/best-vpn\">best VPN<\/a> providers is much more safe than downloading free, unvetted instruments.<\/p>\n<p><a id=\"elk-a28d403c-8779-11f1-b159-eb58a12a2fd9\"\/><\/p>\n<h2 id=\"fake-apps-real-surveillance-3\">Faux apps, actual surveillance<\/h2>\n<p id=\"elk-a28d40d2-8779-11f1-a08c-1faaffa7ed38\">Insikt Group recognized a cluster of attacker-controlled domains allegedly used to stage downloads of functions that seem nowhere on Google Play or Apple&#8217;s App Retailer.<\/p>\n<p>Two names stand out: Pis2ray VPN and a media participant branded YESHICA, which was quietly renamed YESHICA YEPlayer in March 2026 after researchers publicly uncovered the unique.<\/p>\n<aside data-component-name=\"Recirculation:ArticleRiver\" data-recirculation-type=\"inline\" data-mrf-recirculation=\"Trending Bar\" data-nosnippet=\"\" class=\"clear-both pt-2 pb-0 mb-4\">\n        <span class=\"&#10;            flex&#10;            after:content-[''] after:flex-1 after:ml-4 after:my-[0.7rem] after:border-t after:border-solid after:border-t-[#ccc]&#10;            before:content-[''] before:flex-1 before:mr-4 before:my-[0.7rem] before:border-t before:border-solid before:border-t-[#ccc]&#10;            font-article-heading pb-0 text-[length:var(--article-river-title--font-size,1em)] uppercase sm:text-[length:var(--article-river-title--font-size,0.875em)] font-bold&#10;        \"><br \/>\n            You might like<br \/>\n        <\/span><\/p>\n<\/aside>\n<p>In accordance with researchers, for those who obtain and run one among these recordsdata, you get MarkiRAT, a distant entry Trojan. In plain phrases, that&#8217;s software program that fingers management of your machine to someone else.<\/p>\n<div class=\"see-more see-more--clipped\" id=\"elk-2072720755884695924\">\n<figure>\n<blockquote class=\"twitter-tweet hawk-ignore\" data-lang=\"en\" cite=\"https:\/\/twitter.com\/cantworkitout\/status\/2072720755884695924\">\n<p lang=\"en\" dir=\"ltr\">A faux VPN app. A faux media participant. Each delivering Iranian authorities surveillance #malware to focused dissidents. Insikt Group has new analysis on TAG-182 and MarkiRAT:https:\/\/t.co\/G7p9JO6peT#ThreatIntelligence #Cybersecurity pic.twitter.com\/GwDyvGC99r<a href=\"https:\/\/twitter.com\/cantworkitout\/status\/2072720755884695924\" data-url=\"https:\/\/twitter.com\/cantworkitout\/status\/2072720755884695924\" target=\"_blank\" referrerpolicy=\"no-referrer-when-downgrade\" data-hl-processed=\"none\">July 2, 2026<\/a><\/p>\n<\/blockquote>\n<\/figure>\n<\/div>\n<p id=\"elk-360b282c-877c-11f1-b6ce-9fa5796d257c\">Analysts have documented it capturing screenshots and importing them to attacker-run servers, whereas disguising itself below plausible course of names.<\/p>\n<p>It additionally abuses BITS, the background service Home windows makes use of to fetch updates, to tug down additional recordsdata. As a result of that exercise seems like odd system housekeeping somewhat than an assault, it tends to slide previous routine cleanup.<\/p>\n<p>MarkiRAT will not be new. It has beforehand been utilized by Ferocious Kitten, a bunch <a data-analytics-id=\"inline-link\" href=\"https:\/\/securelist.com\/ferocious-kitten-6-years-of-covert-surveillance-in-iran\/102806\/\" target=\"_blank\" rel=\"nofollow\" data-url=\"https:\/\/securelist.com\/ferocious-kitten-6-years-of-covert-surveillance-in-iran\/102806\/\" referrerpolicy=\"no-referrer-when-downgrade\" data-hl-processed=\"none\" data-mrf-recirculation=\"inline-link\">Kaspersky<\/a> documented conducting years of covert surveillance towards activists inside Iran.<\/p>\n<p>Recorded Future stops in need of attributing TAG-182 to any particular Iranian company, however locations it inside a broader ecosystem of state-aligned surveillance teams.<\/p>\n<aside data-component-name=\"Recirculation:ArticleRiver\" data-recirculation-type=\"inline\" data-mrf-recirculation=\"Trending Bar\" data-nosnippet=\"\" class=\"clear-both pt-2 pb-0 mb-4\">\n        <span class=\"&#10;            flex&#10;            after:content-[''] after:flex-1 after:ml-4 after:my-[0.7rem] after:border-t after:border-solid after:border-t-[#ccc]&#10;            before:content-[''] before:flex-1 before:mr-4 before:my-[0.7rem] before:border-t before:border-solid before:border-t-[#ccc]&#10;            font-article-heading pb-0 text-[length:var(--article-river-title--font-size,1em)] uppercase sm:text-[length:var(--article-river-title--font-size,0.875em)] font-bold&#10;        \"><br \/>\n            What to learn subsequent<br \/>\n        <\/span><\/p>\n<\/aside>\n<p><a id=\"elk-a28d42b2-8779-11f1-a4cc-e5fd550052fe\"\/><\/p>\n<aside data-article-category=\"vpn\" data-model-name=\"NordVPN,Surfshark,Proton VPN\" data-render-type=\"editorial\" data-widget-title=\"Today's best VPN deals\" data-widget-type=\"multimodelreview\" class=\"hawk-root\"\/><a id=\"elk-a28d4154-8779-11f1-bc29-b145f2ce2c2b\"\/><\/p>\n<h2 id=\"why-a-fake-vpn-makes-such-an-effective-lure-3\">Why a faux VPN makes such an efficient lure<\/h2>\n<p id=\"elk-a28d4226-8779-11f1-9969-137d8be68311\">Distribution runs largely by social media. Insikt Group discovered Instagram posts selling Pis2ray VPN within the weeks following avenue protests in Iran in late 2025, and once more across the <a data-analytics-id=\"inline-link\" href=\"https:\/\/www.techradar.com\/vpn\/vpn-privacy-security\/the-internet-is-not-connected-irans-88-day-blackout-begins-to-lift-but-traffic-remains-under-50-percent\" data-url=\"https:\/\/www.techradar.com\/vpn\/vpn-privacy-security\/the-internet-is-not-connected-irans-88-day-blackout-begins-to-lift-but-traffic-remains-under-50-percent\" data-hl-processed=\"none\" data-mrf-recirculation=\"inline-link\" data-before-rewrite-localise=\"https:\/\/www.techradar.com\/vpn\/vpn-privacy-security\/the-internet-is-not-connected-irans-88-day-blackout-begins-to-lift-but-traffic-remains-under-50-percent\">country&#8217;s prolonged internet shutdown<\/a>, which ended with partial restoration of entry on 26 Might 2026.<\/p>\n<p>The individuals most determined for a <a data-analytics-id=\"inline-link\" href=\"https:\/\/www.techradar.com\/vpn\/virtual-private-networks\" data-url=\"https:\/\/www.techradar.com\/vpn\/virtual-private-networks\" data-hl-processed=\"none\" data-mrf-recirculation=\"inline-link\" data-before-rewrite-localise=\"https:\/\/www.techradar.com\/vpn\/virtual-private-networks\">virtual private network (VPN)<\/a> in a censored nation are precisely the individuals most certainly to put in one from a social media hyperlink, as a result of the official shops are sometimes the very factor they can not attain.<\/p>\n<p>Recorded Future considers it nearly sure that the majority targets are positioned in Iran or tied to anti-government actions in Europe and North America. TechRadar has lined <a data-analytics-id=\"inline-link\" href=\"https:\/\/www.techradar.com\/vpn\/vpn-privacy-security\/beware-iran-linked-fake-vpn-apps-found-to-spy-on-android-users\" target=\"_blank\" rel=\"nofollow\" data-url=\"https:\/\/www.techradar.com\/vpn\/vpn-privacy-security\/beware-iran-linked-fake-vpn-apps-found-to-spy-on-android-users\" data-hl-processed=\"none\" data-mrf-recirculation=\"inline-link\" data-before-rewrite-localise=\"https:\/\/www.techradar.com\/vpn\/vpn-privacy-security\/beware-iran-linked-fake-vpn-apps-found-to-spy-on-android-users\">previous Iran-linked fake VPN campaigns<\/a>, and this one appears to observe the identical sample with higher infrastructure.<\/p>\n<p><a id=\"elk-a28d433e-8779-11f1-8a71-1dd120e261d2\"\/><\/p>\n<h2 id=\"how-to-stay-safe-3\">The right way to keep protected<\/h2>\n<p id=\"elk-a28d43b6-8779-11f1-bdb7-119c8c87c2f4\">Most readers won&#8217;t ever be focused by a state actor, however the underlying lesson travels.<\/p>\n<p>Set up VPN apps solely from official shops, and examine that the supplier has an actual, verifiable presence exterior the app itemizing.<\/p>\n<p>Deal with any VPN promoted by an Instagram put up, a Telegram channel, or a direct message as suspect, nevertheless polished it seems.<\/p>\n<p>Star rankings are a weak sign, since faux critiques are low-cost.<\/p>\n<hr id=\"elk-a28d442e-8779-11f1-92e5-fd3a29212f11\"\/>\n<p id=\"elk-a28d449c-8779-11f1-ab03-95300f9eb117\"><a data-analytics-id=\"inline-link\" href=\"https:\/\/news.google.com\/publications\/CAAqKAgKIiJDQklTRXdnTWFnOEtEWFJsWTJoeVlXUmhjaTVqYjIwb0FBUAE?hl=en-GB&amp;gl=GB&amp;ceid=GB%3Aen\" target=\"_blank\" data-url=\"https:\/\/news.google.com\/publications\/CAAqKAgKIiJDQklTRXdnTWFnOEtEWFJsWTJoeVlXUmhjaTVqYjIwb0FBUAE?hl=en-GB&amp;gl=GB&amp;ceid=GB%3Aen\" referrerpolicy=\"no-referrer-when-downgrade\" data-hl-processed=\"none\" data-mrf-recirculation=\"inline-link\"><em><strong>Follow TechRadar on Google News<\/strong><\/em><\/a> and<em> <\/em><a data-analytics-id=\"inline-link\" href=\"https:\/\/www.google.com\/preferences\/source?q=techradar.com\" target=\"_blank\" data-url=\"https:\/\/www.google.com\/preferences\/source?q=techradar.com\" referrerpolicy=\"no-referrer-when-downgrade\" data-hl-processed=\"none\" data-mrf-recirculation=\"inline-link\"><em><strong>add us as a preferred source<\/strong><\/em><\/a><em> to get our professional information, critiques, and opinion in your feeds. Be certain to click on the Comply with button!<\/em><\/p>\n<hr id=\"elk-a28d4514-8779-11f1-ad2e-87b85263fb87\"\/>\n<\/div>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><br \/>\n<br \/><iframe data-lazy=\"true\" data-src=\"https:\/\/www.fiverr.com\/gig_widgets?id=U2FsdGVkX18x7XQvttUTrv1oEqmGNGTgvvCUiUoJ\/AP4z\/UyMz8lXGOLpu15jIMxBbTR0gmD5uBoFvhC4KWeALQRp3h\/X\/AwcVD0K8Wj9H\/ZzYKzcCNHosB9oS4SCJJFWiN85P9ICAc4OgCoE\/wHKIY7CDkf2\/DQ1vqGvk4smVe5cRDEmrLPCWi4FC8p40VUhSmWQ5udCm0zoJtorgWv3vbDQw0kKYkwn39ozAnQXDe+YvWMxkLFWA+O3TFwkJvdkIK+\/AUSnRssPKt5WHY0FhNOxnSPcLslEL4G4\/RfP95ve99U+kRnDy3X+KtzdQLY+u935ghON\/o3UE4IMv9oN6JX9RnxzL\/LRcOgnHigxStSGPKsZYtnz8RWNVT\/rOLAibqiWJadC5MYHRbekF3eg6FOGrQGkXYbsn0+a5aovnlLCbLwIqY9fcS17UX8J235iQ6cdmHNbrPeS84CMm34RA==&affiliate_id=1052423&strip_google_tagmanager=true\" loading=\"lazy\" data-with-title=\"true\" class=\"fiverr_nga_frame\" frameborder=\"0\" height=\"350\" width=\"100%\" referrerpolicy=\"no-referrer-when-downgrade\" data-mode=\"random_gigs\" onload=\" var frame = this; var script = document.createElement('script'); script.addEventListener('load', function() { window.FW_SDK.register(frame); }); script.setAttribute('src', 'https:\/\/www.fiverr.com\/gig_widgets\/sdk'); document.body.appendChild(script); \" ><\/iframe>\n<br \/><a href=\"https:\/\/www.techradar.com\/vpn\/vpn-privacy-security\/iran-linked-group-caught-hiding-surveillance-tools-in-fake-apps\">Source link <\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Recorded Future discovered an Iran-linked group spreading spy ware The malware is delivered by faux VPN and media participant apps Researchers assess that the majority&#8230;<\/p>\n","protected":false},"author":1,"featured_media":136616,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[],"class_list":["post-136615","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tech-universe"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Iran-linked group caught hiding surveillance tools in fake apps - mailinvest.blog<\/title>\n<meta name=\"description\" content=\"Technology is forever changing, and there are always new pieces of technology to replace obsolete ones. Tons of people enjoy reading tech blogs on a daily basis.mailinvest.blog tracks all the latest consumer technology breakthroughs and shows you what&#039;s new, what matters and how technology can enrich your life. mailinvest.blog also provides the information, tools, and advice that helps when deciding what to buy.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/mailinvest.blog\/index.php\/2026\/07\/25\/iran-linked-group-caught-hiding-surveillance-tools-in-fake-apps\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Iran-linked group caught hiding surveillance tools in fake apps - mailinvest.blog\" \/>\n<meta property=\"og:description\" content=\"Technology is forever changing, and there are always new pieces of technology to replace obsolete ones. Tons of people enjoy reading tech blogs on a daily basis.mailinvest.blog tracks all the latest consumer technology breakthroughs and shows you what&#039;s new, what matters and how technology can enrich your life. mailinvest.blog also provides the information, tools, and advice that helps when deciding what to buy.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/mailinvest.blog\/index.php\/2026\/07\/25\/iran-linked-group-caught-hiding-surveillance-tools-in-fake-apps\/\" \/>\n<meta property=\"og:site_name\" content=\"mailinvest.blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/freelanceracademic\/\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-25T06:41:18+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-07-25T06:42:21+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/mailinvest.blog\/wp-content\/uploads\/2026\/07\/z8Ysj7MUYeyK822yMiTepP-2560-80.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1440\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"admin@mailinvest.blog\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin@mailinvest.blog\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/mailinvest.blog\\\/index.php\\\/2026\\\/07\\\/25\\\/iran-linked-group-caught-hiding-surveillance-tools-in-fake-apps\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/mailinvest.blog\\\/index.php\\\/2026\\\/07\\\/25\\\/iran-linked-group-caught-hiding-surveillance-tools-in-fake-apps\\\/\"},\"author\":{\"name\":\"admin@mailinvest.blog\",\"@id\":\"https:\\\/\\\/mailinvest.blog\\\/#\\\/schema\\\/person\\\/012701c4c204d4e4ebd34f926cfd31a4\"},\"headline\":\"Iran-linked group caught hiding surveillance tools in fake apps\",\"datePublished\":\"2026-07-25T06:41:18+00:00\",\"dateModified\":\"2026-07-25T06:42:21+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/mailinvest.blog\\\/index.php\\\/2026\\\/07\\\/25\\\/iran-linked-group-caught-hiding-surveillance-tools-in-fake-apps\\\/\"},\"wordCount\":660,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/mailinvest.blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/mailinvest.blog\\\/index.php\\\/2026\\\/07\\\/25\\\/iran-linked-group-caught-hiding-surveillance-tools-in-fake-apps\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/mailinvest.blog\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/z8Ysj7MUYeyK822yMiTepP-2560-80.jpg\",\"articleSection\":[\"Tech Universe\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/mailinvest.blog\\\/index.php\\\/2026\\\/07\\\/25\\\/iran-linked-group-caught-hiding-surveillance-tools-in-fake-apps\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/mailinvest.blog\\\/index.php\\\/2026\\\/07\\\/25\\\/iran-linked-group-caught-hiding-surveillance-tools-in-fake-apps\\\/\",\"url\":\"https:\\\/\\\/mailinvest.blog\\\/index.php\\\/2026\\\/07\\\/25\\\/iran-linked-group-caught-hiding-surveillance-tools-in-fake-apps\\\/\",\"name\":\"Iran-linked group caught hiding surveillance tools in fake apps - mailinvest.blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/mailinvest.blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/mailinvest.blog\\\/index.php\\\/2026\\\/07\\\/25\\\/iran-linked-group-caught-hiding-surveillance-tools-in-fake-apps\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/mailinvest.blog\\\/index.php\\\/2026\\\/07\\\/25\\\/iran-linked-group-caught-hiding-surveillance-tools-in-fake-apps\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/mailinvest.blog\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/z8Ysj7MUYeyK822yMiTepP-2560-80.jpg\",\"datePublished\":\"2026-07-25T06:41:18+00:00\",\"dateModified\":\"2026-07-25T06:42:21+00:00\",\"description\":\"Technology is forever changing, and there are always new pieces of technology to replace obsolete ones. Tons of people enjoy reading tech blogs on a daily basis.mailinvest.blog tracks all the latest consumer technology breakthroughs and shows you what's new, what matters and how technology can enrich your life. mailinvest.blog also provides the information, tools, and advice that helps when deciding what to buy.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/mailinvest.blog\\\/index.php\\\/2026\\\/07\\\/25\\\/iran-linked-group-caught-hiding-surveillance-tools-in-fake-apps\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/mailinvest.blog\\\/index.php\\\/2026\\\/07\\\/25\\\/iran-linked-group-caught-hiding-surveillance-tools-in-fake-apps\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/mailinvest.blog\\\/index.php\\\/2026\\\/07\\\/25\\\/iran-linked-group-caught-hiding-surveillance-tools-in-fake-apps\\\/#primaryimage\",\"url\":\"https:\\\/\\\/mailinvest.blog\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/z8Ysj7MUYeyK822yMiTepP-2560-80.jpg\",\"contentUrl\":\"https:\\\/\\\/mailinvest.blog\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/z8Ysj7MUYeyK822yMiTepP-2560-80.jpg\",\"width\":2560,\"height\":1440},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/mailinvest.blog\\\/index.php\\\/2026\\\/07\\\/25\\\/iran-linked-group-caught-hiding-surveillance-tools-in-fake-apps\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/mailinvest.blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Iran-linked group caught hiding surveillance tools in fake apps\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/mailinvest.blog\\\/#website\",\"url\":\"https:\\\/\\\/mailinvest.blog\\\/\",\"name\":\"mailinvest.blog\",\"description\":\"Technology is forever changing, and there are always new pieces of technology to replace obsolete ones. Tons of people enjoy reading tech blogs on a daily basis. mailinvest.blog tracks all the latest consumer technology breakthroughs and shows you what&#039;s new, what matters and how technology can enrich your life. mailinvest.blog also provides the information, tools, and advice that helps when deciding what to buy.\",\"publisher\":{\"@id\":\"https:\\\/\\\/mailinvest.blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/mailinvest.blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/mailinvest.blog\\\/#organization\",\"name\":\"mailinvest\",\"url\":\"https:\\\/\\\/mailinvest.blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/mailinvest.blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/mailinvest.blog\\\/wp-content\\\/uploads\\\/2022\\\/01\\\/default.png\",\"contentUrl\":\"https:\\\/\\\/mailinvest.blog\\\/wp-content\\\/uploads\\\/2022\\\/01\\\/default.png\",\"width\":1000,\"height\":1000,\"caption\":\"mailinvest\"},\"image\":{\"@id\":\"https:\\\/\\\/mailinvest.blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/freelanceracademic\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/mailinvest.blog\\\/#\\\/schema\\\/person\\\/012701c4c204d4e4ebd34f926cfd31a4\",\"name\":\"admin@mailinvest.blog\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/98ed217bd0f3d6a6dcae2d9b0c76e305b049a07275e315e1407e19ec8b08e139?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/98ed217bd0f3d6a6dcae2d9b0c76e305b049a07275e315e1407e19ec8b08e139?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/98ed217bd0f3d6a6dcae2d9b0c76e305b049a07275e315e1407e19ec8b08e139?s=96&d=mm&r=g\",\"caption\":\"admin@mailinvest.blog\"},\"sameAs\":[\"https:\\\/\\\/mailinvest.blog\",\"admin@mailinvest.blog\"],\"url\":\"https:\\\/\\\/mailinvest.blog\\\/index.php\\\/author\\\/adminmailinvest-blog\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Iran-linked group caught hiding surveillance tools in fake apps - mailinvest.blog","description":"Technology is forever changing, and there are always new pieces of technology to replace obsolete ones. Tons of people enjoy reading tech blogs on a daily basis.mailinvest.blog tracks all the latest consumer technology breakthroughs and shows you what's new, what matters and how technology can enrich your life. mailinvest.blog also provides the information, tools, and advice that helps when deciding what to buy.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/mailinvest.blog\/index.php\/2026\/07\/25\/iran-linked-group-caught-hiding-surveillance-tools-in-fake-apps\/","og_locale":"en_US","og_type":"article","og_title":"Iran-linked group caught hiding surveillance tools in fake apps - mailinvest.blog","og_description":"Technology is forever changing, and there are always new pieces of technology to replace obsolete ones. Tons of people enjoy reading tech blogs on a daily basis.mailinvest.blog tracks all the latest consumer technology breakthroughs and shows you what's new, what matters and how technology can enrich your life. mailinvest.blog also provides the information, tools, and advice that helps when deciding what to buy.","og_url":"https:\/\/mailinvest.blog\/index.php\/2026\/07\/25\/iran-linked-group-caught-hiding-surveillance-tools-in-fake-apps\/","og_site_name":"mailinvest.blog","article_publisher":"https:\/\/www.facebook.com\/freelanceracademic\/","article_published_time":"2026-07-25T06:41:18+00:00","article_modified_time":"2026-07-25T06:42:21+00:00","og_image":[{"width":2560,"height":1440,"url":"https:\/\/mailinvest.blog\/wp-content\/uploads\/2026\/07\/z8Ysj7MUYeyK822yMiTepP-2560-80.jpg","type":"image\/jpeg"}],"author":"admin@mailinvest.blog","twitter_card":"summary_large_image","twitter_misc":{"Written by":"admin@mailinvest.blog","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/mailinvest.blog\/index.php\/2026\/07\/25\/iran-linked-group-caught-hiding-surveillance-tools-in-fake-apps\/#article","isPartOf":{"@id":"https:\/\/mailinvest.blog\/index.php\/2026\/07\/25\/iran-linked-group-caught-hiding-surveillance-tools-in-fake-apps\/"},"author":{"name":"admin@mailinvest.blog","@id":"https:\/\/mailinvest.blog\/#\/schema\/person\/012701c4c204d4e4ebd34f926cfd31a4"},"headline":"Iran-linked group caught hiding surveillance tools in fake apps","datePublished":"2026-07-25T06:41:18+00:00","dateModified":"2026-07-25T06:42:21+00:00","mainEntityOfPage":{"@id":"https:\/\/mailinvest.blog\/index.php\/2026\/07\/25\/iran-linked-group-caught-hiding-surveillance-tools-in-fake-apps\/"},"wordCount":660,"commentCount":0,"publisher":{"@id":"https:\/\/mailinvest.blog\/#organization"},"image":{"@id":"https:\/\/mailinvest.blog\/index.php\/2026\/07\/25\/iran-linked-group-caught-hiding-surveillance-tools-in-fake-apps\/#primaryimage"},"thumbnailUrl":"https:\/\/mailinvest.blog\/wp-content\/uploads\/2026\/07\/z8Ysj7MUYeyK822yMiTepP-2560-80.jpg","articleSection":["Tech Universe"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/mailinvest.blog\/index.php\/2026\/07\/25\/iran-linked-group-caught-hiding-surveillance-tools-in-fake-apps\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/mailinvest.blog\/index.php\/2026\/07\/25\/iran-linked-group-caught-hiding-surveillance-tools-in-fake-apps\/","url":"https:\/\/mailinvest.blog\/index.php\/2026\/07\/25\/iran-linked-group-caught-hiding-surveillance-tools-in-fake-apps\/","name":"Iran-linked group caught hiding surveillance tools in fake apps - mailinvest.blog","isPartOf":{"@id":"https:\/\/mailinvest.blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/mailinvest.blog\/index.php\/2026\/07\/25\/iran-linked-group-caught-hiding-surveillance-tools-in-fake-apps\/#primaryimage"},"image":{"@id":"https:\/\/mailinvest.blog\/index.php\/2026\/07\/25\/iran-linked-group-caught-hiding-surveillance-tools-in-fake-apps\/#primaryimage"},"thumbnailUrl":"https:\/\/mailinvest.blog\/wp-content\/uploads\/2026\/07\/z8Ysj7MUYeyK822yMiTepP-2560-80.jpg","datePublished":"2026-07-25T06:41:18+00:00","dateModified":"2026-07-25T06:42:21+00:00","description":"Technology is forever changing, and there are always new pieces of technology to replace obsolete ones. Tons of people enjoy reading tech blogs on a daily basis.mailinvest.blog tracks all the latest consumer technology breakthroughs and shows you what's new, what matters and how technology can enrich your life. mailinvest.blog also provides the information, tools, and advice that helps when deciding what to buy.","breadcrumb":{"@id":"https:\/\/mailinvest.blog\/index.php\/2026\/07\/25\/iran-linked-group-caught-hiding-surveillance-tools-in-fake-apps\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/mailinvest.blog\/index.php\/2026\/07\/25\/iran-linked-group-caught-hiding-surveillance-tools-in-fake-apps\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/mailinvest.blog\/index.php\/2026\/07\/25\/iran-linked-group-caught-hiding-surveillance-tools-in-fake-apps\/#primaryimage","url":"https:\/\/mailinvest.blog\/wp-content\/uploads\/2026\/07\/z8Ysj7MUYeyK822yMiTepP-2560-80.jpg","contentUrl":"https:\/\/mailinvest.blog\/wp-content\/uploads\/2026\/07\/z8Ysj7MUYeyK822yMiTepP-2560-80.jpg","width":2560,"height":1440},{"@type":"BreadcrumbList","@id":"https:\/\/mailinvest.blog\/index.php\/2026\/07\/25\/iran-linked-group-caught-hiding-surveillance-tools-in-fake-apps\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/mailinvest.blog\/"},{"@type":"ListItem","position":2,"name":"Iran-linked group caught hiding surveillance tools in fake apps"}]},{"@type":"WebSite","@id":"https:\/\/mailinvest.blog\/#website","url":"https:\/\/mailinvest.blog\/","name":"mailinvest.blog","description":"Technology is forever changing, and there are always new pieces of technology to replace obsolete ones. Tons of people enjoy reading tech blogs on a daily basis. mailinvest.blog tracks all the latest consumer technology breakthroughs and shows you what&#039;s new, what matters and how technology can enrich your life. mailinvest.blog also provides the information, tools, and advice that helps when deciding what to buy.","publisher":{"@id":"https:\/\/mailinvest.blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/mailinvest.blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/mailinvest.blog\/#organization","name":"mailinvest","url":"https:\/\/mailinvest.blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/mailinvest.blog\/#\/schema\/logo\/image\/","url":"https:\/\/mailinvest.blog\/wp-content\/uploads\/2022\/01\/default.png","contentUrl":"https:\/\/mailinvest.blog\/wp-content\/uploads\/2022\/01\/default.png","width":1000,"height":1000,"caption":"mailinvest"},"image":{"@id":"https:\/\/mailinvest.blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/freelanceracademic\/"]},{"@type":"Person","@id":"https:\/\/mailinvest.blog\/#\/schema\/person\/012701c4c204d4e4ebd34f926cfd31a4","name":"admin@mailinvest.blog","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/98ed217bd0f3d6a6dcae2d9b0c76e305b049a07275e315e1407e19ec8b08e139?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/98ed217bd0f3d6a6dcae2d9b0c76e305b049a07275e315e1407e19ec8b08e139?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/98ed217bd0f3d6a6dcae2d9b0c76e305b049a07275e315e1407e19ec8b08e139?s=96&d=mm&r=g","caption":"admin@mailinvest.blog"},"sameAs":["https:\/\/mailinvest.blog","admin@mailinvest.blog"],"url":"https:\/\/mailinvest.blog\/index.php\/author\/adminmailinvest-blog\/"}]}},"_links":{"self":[{"href":"https:\/\/mailinvest.blog\/index.php\/wp-json\/wp\/v2\/posts\/136615","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mailinvest.blog\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mailinvest.blog\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mailinvest.blog\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mailinvest.blog\/index.php\/wp-json\/wp\/v2\/comments?post=136615"}],"version-history":[{"count":1,"href":"https:\/\/mailinvest.blog\/index.php\/wp-json\/wp\/v2\/posts\/136615\/revisions"}],"predecessor-version":[{"id":136617,"href":"https:\/\/mailinvest.blog\/index.php\/wp-json\/wp\/v2\/posts\/136615\/revisions\/136617"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mailinvest.blog\/index.php\/wp-json\/wp\/v2\/media\/136616"}],"wp:attachment":[{"href":"https:\/\/mailinvest.blog\/index.php\/wp-json\/wp\/v2\/media?parent=136615"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mailinvest.blog\/index.php\/wp-json\/wp\/v2\/categories?post=136615"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mailinvest.blog\/index.php\/wp-json\/wp\/v2\/tags?post=136615"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}