Starry Addax targets human rights defenders in North Africa with new malware

• Cisco Talos is disclosing a new threat actor we deemed “Starry Addax” targeting mostly human rights activists, associated with the Sahrawi Arab Democratic Republic (SADR) cause with a novel mobile malware. 
• Starry Addax conducts phishing attacks tricking their targets into installing malicious Android applications we’re calling “FlexStarling.” 
• For Windows-based targets, Starry Addax will serve credential-harvesting pages masquerading as login pages from popular media websites. 

Talos would like to thank the Yahoo! Paranoids Advanced Cyber Threats Team for their collaboration in …

activists actor africa android applications attacks calling cisco cisco talos defenders human human rights malicious malware mobile mobile malware north novel phishing phishing attacks rights talos targeting threat threat actor