Researchers from CSE ZLAB ZLAB malware Analysis Laboratory analyzed a set of samples of the Pallas malware family used by the Dark Caracal APT in its hacking operations. The first analysis of the APT linked it to Lebanese General Directorate of General Security. The malware is able to collect a large amount of data and to send it to a C&C through an encrypted URL that is decrypted at runtime. Attackers use SMS, a Facebook message or Facebook post to trick victims into installing the malware.”]
Source: https://securityaffairs.co/wordpress/68983/apt/dark-caracal-pallas-malware.html