Dark Caracal is a spyware campaign conducted by a group of hackers. The campaign was discovered by the Electronic Frontier Foundation and the mobile security firm Lookout, who published their findings on January 18, 2018. The campaign has used malicious applications to gather data from victim systems, including instant messenger software that imitates the look and feel of popular instant messenger apps. It is suspected to be linked to the Lebanese government's General Directorate of General Security. The component used to monitor Android devices is known as Pallas; the component used to monitor Windows devices is a variant of the Bandook trojan.
The data they have stolen, include documents, call records, text messages, audio recordings, secure messaging client content, browsing history, contact information, photos, location data, and other information that allows the group to identify their targets and have a look at their personal lives.