Loading threat actor…
Bindecy is an Israel-based mercenary hacking and surveillance firm specializing in zero-click mobile exploits and spyware. Its surveillance offerings include products named Archer and Cupid. Spyware-related activity associated with the firm has been identified in Mexico and Colombia. Bindecy is linked to Discover-Tech, an Israeli advertising company that operates the Controlium targeting platform. Controlium supports device selection using advertising identifiers, cookies, and IP addresses and can facilitate spyware delivery through advertisements without user interaction, a technique known as AdFection. Authentication telemetry and infrastructure analysis connect Bindecy-associated users and product infrastructure to Controlium. These connections do not establish that Bindecy conducted the separately attributed Candiru infections or that the broader advertising platform's exposed organizations were Bindecy targets.
Who, where, and from where this actor operates. Pulled from open-source reporting and Mallory's analyst review.
Geographies tied to known operations.
Attributed origin per open-source reporting.
3 malware families Mallory has associated with this actor across public reporting.
7 indicators attributed to this actor. Values are masked here and available in full in Mallory.
6 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.