AppMilad is an Iranian spyware group targeting Middle Eastern enterprises through fake mobile apps.
AppMilad is an Iranian hacking group behind the RatMilad spyware campaign, designed to silently exfiltrate personal and corporate data such as private communications and photos. The group primarily targets Middle Eastern enterprises, distributing the spyware through fake mobile applications. Their main TTPs include social engineering via malicious decoy apps for initial access, device infiltration, and data exfiltration. Defenders, especially those protecting entities in the Middle East, should enforce strict Mobile Device Management (MDM) policies blocking installs from unofficial sources and monitor network traffic for anomalous data leaks.
AppMilad is an Iranian hacking group that has been identified as the source of a spyware campaign called RatMilad. This spyware is designed to silently infiltrate victims' devices and gather personal and corporate information, including private communications and photos. The group has been distributing the spyware through fake apps and targeting primarily Middle Eastern enterprises.
AppMilad is known for being the source of the RatMilad spyware campaign.
AppMilad distributes the spyware through fake mobile applications.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.