CatalanGate: Extensive Mercenary Spyware Operation against Catalans Using Pegasus and Candiru - The Citizen Lab
Tags
cmtmf-attack-pattern: Masquerading
country: Afghanistan Belgium Canada Switzerland El Salvador Germany India Israel Spain Panama Poland United States Of America
attack-pattern: Data Cloud Accounts - T1078.004 Cloud Accounts - T1585.003 Cloud Accounts - T1586.003 Domains - T1583.001 Domains - T1584.001 Exploits - T1587.004 Exploits - T1588.005 Hardware - T1592.001 Hooking - T1617 Javascript - T1059.007 Masquerading - T1655 Server - T1583.004 Server - T1584.004 Sms Messages - T1636.004 Software - T1592.002 Tool - T1588.002 Vulnerabilities - T1588.006 Hooking - T1179 Masquerading - T1036 Hooking Masquerading
Show in Graph
Common Information
Type Value
UUID df89914a-356d-4e0d-a388-4069b2808fa0
Fingerprint f60ca0bb08b7acc9
Analysis status DONE
Considered CTI value 2
Text language
Published April 18, 2022, midnight
Added to db Sept. 26, 2022, 9:34 a.m.
Last updated Nov. 16, 2024, 1:15 p.m.
Headline CatalanGate Extensive Mercenary Spyware Operation against Catalans Using Pegasus and Candiru
Title CatalanGate: Extensive Mercenary Spyware Operation against Catalans Using Pegasus and Candiru - The Citizen Lab
Detected Hints/Tags/Attributes 155/3/21
Source URLs
Redirection Url
Details Source https://citizenlab.ca/2022/04/catalangate-extensive-mercenary-spyware-operation-against-catalans-using-pegasus-candiru/
URL Provider
Details Provider Source level domain
Details citizenlab.ca citizenlab.ca
Attributes
Details Type #Events CTI Value
Details CVE 11 
cve-2019-3568
Details CVE 7 
cve-2021-31979
Details CVE 7 
cve-2021-33771
Details Domain 359 
com.apple
Details Domain 1 
stat.email
Details Domain 167 
tutanota.com
Details Domain 1 
nnews.co
Details Domain 1 
statsads.co
Details Domain 2 
redirstats.com
Details Domain 2 
123tramites.com
Details Domain 1 
adsmetrics.co
Details Domain 1 
statsupplier.com
Details Domain 1 
kualo.net
Details Domain 1 
infoquiz.net
Details Domain 2 
candirusecurity.com
Details Domain 1 
adtrack.link
Details Domain 1 
cortana.cloud
Details Domain 1 
rbtlnk.net
Details Email 1 
news105@tutanota.com
Details IPv4 1 
185.181.8.155
Details IPv4 1 
185.193.38.113