Stealth Mango and Tangelo emerged around 2017 as a surveillance operation primarily attributed to members of the Pakistani military. Their main motivation is intelligence gathering and espionage, targeting individuals in South Asia, the Middle East, and Western countries. This group is notable for its reliance on social engineering tactics and commercially available or repurposed "spouseware"-like tools, rather than exploiting zero-day vulnerabilities, yet successfully exfiltrating significant volumes of sensitive data. Despite their effectiveness, operational security shortcomings led to the public exposure of exfiltrated content on their command and control infrastructure. While Stealth Mango refers to their Android surveillanceware and Tangelo to their iOS counterpart, the actor is identified as the entity operating these tools. The group is believed to be associated with Operation C Major and Transparent Tribe.
United Arab EmiratesAfghanistanAustraliaGermanyUnited KingdomIndiaIraqIran, Islamic Republic ofPakistanUnited States
Sectores objetivo (SOCRadar)
Information ServicesProfessional&Technical ServicesHealthCare & Social AssistanceOtherPublic AdministrationTelecommunicationsOther Information ServicesCivic&Social OrganizationsSpace & DefenseNational Security&International Affairs