Fake Bahrain Alert App Deploys Android Surveillance Malware

July 22, 2026 · Dark Reading · Severity: HIGH

A fake Bahrain government alert application distributed through unofficial channels, masquerading as a legitimate Google Play app, delivers a sophisticated four-stage Android spyware payload. The multi-stage infection process makes detection by antivirus engines and static analysis tools significantly harder, as each stage decrypts or downloads the next component only after specific conditions are met. The spyware collects contacts, messages, call logs, location data, device information, and potentially audio recordings, enabling comprehensive surveillance of victims who believed they were installing a legitimate government alert system for public safety.