DEV-0196: QuaDream’s “KingsPawn” malware used to target civil society in Europe, North America, the Middle East, and Southeast Asia

Microsoft analyzes a threat group tracked as DEV-0196, the actor’s iOS malware “KingsPawn”, and their link to an Israel-based private sector offensive actor (PSOA) known as QuaDream, which reportedly sells a suite of exploits, malware, and infrastructure called REIGN, that’s designed to exfiltrate data from mobile devices.

The post DEV-0196: QuaDream’s “KingsPawn” malware used to target civil society in Europe, North America, the Middle East, and Southeast Asia appeared first on Microsoft Security Blog.

actor america asia blog called civil civil society cybersecurity data dev dev-0196 devices europe exfiltrate data exploits infrastructure ios israel kingspawn link malware microsoft microsoft security microsoft security intelligence middle east mobile mobile devices north north america offensive private private sector private-sector offensive actor (psoa) quadream reign sector security security blog society southeast asia target threat threat group