ZooPark
- First seen
- 2018-05-01 00:00:00
- Malware type
- spyware
- Family
- Malware family
- Last IoC activity
- 2026-06-26 08:55:58
- Profile updated
- 2026-07-07 12:53:36
Targeted industries: government-and-public-sector
Targeted regions: country_code:in country_code:pk country_code:ir
Context
ZooPark is an Android spyware campaign targeting political entities in the Middle East. It is known for its capability of data exfiltration, including call logs, contact lists, and text messages, and exploiting vulnerabilities in popular apps.
Reports & references
- Kaspersky — 85394 (report)
- secureworks.com — Cobalt Juno (report)
- Kaspersky — 91897 (report)
- malpedia.caad.fkie.fraunhofer.de — Apk.Zoopark (report)
- media.kasperskycontenthub.com — Zoopark For Public Final Edit (report)