Alerts
Events
DCR
Explore Cyware Products
Alerts
Events
DCR
Go to listing page
Active infrastructure for Candiru spyware linked to Hungary, Saudi Arabia
Malware and Vulnerabilities
August 06, 2025
therecord
Researchers identified eight operational infrastructure clusters associated with Candiru’s DevilsTongue spyware, a Windows-based surveillance tool. Five of these clusters are currently active, with confirmed links to Hungary and Saudi Arabia.
Read More
Candiru Spyware
DevilsTongue
Publisher
Previous
Shared secret: EDR killer in the kill chain
Malware and Vulnerabilities
Next
PBS confirms data breach after employee info leaked on ...
Breaches and Incidents