Houthi rebels are operating their own GuardZoo spyware

Houthi rebels have been identified as the operators behind the GuardZoo spyware, a less sophisticated but still capable surveillance tool that can collect data similar to the notorious Pegasus malware. GuardZoo, based on the Dendroid RAT, has been active since at least 2019 and is distributed through WhatsApp or direct browser downloads using social engineering tactics. The malware targets Yemeni military members and has been found on devices in Saudi Arabia, Egypt, and Oman. While GuardZoo may not pose a significant threat to entities outside the Middle East, the rise of similar surveillance malware operated by state-backed groups is a growing concern. These tools, including GuardZoo, are effective in collecting sensitive data and tracking movements, emphasizing the importance of staying vigilant and implementing security measures. Despite its lower sophistication compared to Pegasus, GuardZoo serves as a reminder of the increasing prevalence of surveillance malware and the need for proactive cybersecurity measures.