Threat Actor
DARK CARTOGRAPHER
- First Reported
- Oct 15, 2026
- Latest Reported
- Oct 19, 2026
Reported Context (3)
- Threat actor tracked by Citizen Lab; researchers found indications that it exploited mobile-carrier systems in more than 30 countries to link device advertising IDs with phone numbers. Citizen Lab Reports Spyware Delivered Through Targeted Online Ads Without User Interaction
- Surveillance threat actor reported by Citizen Lab to build databases linking mobile advertising identifiers to phone numbers by exploiting mobile-carrier vulnerabilities. Citizen Lab Links Israeli Ad Firm to Candiru Zero-Click Spyware Attacks
- Name used by The Citizen Lab for a separate threat actor reportedly using Discover-Tech infrastructure to exploit vulnerabilities across mobile carriers and link device advertising IDs with phone numbers. Citizen Lab Details Zero-Click Spyware Delivered Through Targeted Ads
Malware (1)
People (2)
Threat Actors (1)
Vendors (3)
Products (1)
Industries (3)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.