In recent months, there has been a growing number of protests in Iran after Mahsa Amini’s death. And while these protests have been met with a heavy crackdown by the government, it seems that they may have also been targeted by spying malware.
According to Voice of America (VoA), spyware has been detected on the Android cellphones of some individuals recently detained for protesting against the government.
The malware, identified as I3mon, can perform all kinds of spying operations. It comes with an installation file (com.etechd.l3mon.apk).
VoA obtained a copy of the spyware. In its report, the agency noted that the malware was previously distributed on different forums and titles such as Telegram with Free Internet.
On the other hand, cybersecurity firms like Kaspersky and Dr. Web have already categorized the malware as a trojan of the Android malware family. Dr. Web dubbed the malware as “Android.SmsSpy.88.origin” back in August 2015.
