APT36 Ghazwa Multi-Capability Surveillance Activation (Screen/Audio/GPS/SMS) within 5 Minutes

Ibrahim Saud@tektrix

•updated Jun 28, 2026•0•0•2

Detects Android applications exhibiting multiple sensitive behaviors simultaneously within a 5-minute window, such as screen recording, audio capture, GPS tracking, and unauthorized access to SMS, call logs, or contacts. This behavior is strongly indicative of malicious mobile spyware.