Projects / MAL
Malware Detection
Methods and tools to detect and analyse malware used against civil society, from commodity stalkerware to mercenary spyware, with a focus on mobile devices.
- Status
- Active
- Since
- 2024
We study malware that targets journalists, activists and other civil society actors: how it is delivered, how it behaves on infected devices, and how it communicates with its operators. By analysing past infections and the tools, tactics and procedures of malicious actors, we develop detection methods, such as inducement-based network traffic analysis, so that future threats can be identified and responded to effectively.
Updates
- iRL releases MVT-pi for device forensics (opens in a new tab) A script and guide to help set up Mobile Verification Toolkit (MVT) on Raspberry Pi devices for isolated forensics.