TI Mindmap HUB
Threat Intelligence Report

Tracking Candiru’s DevilsTongue Spyware in Multiple Countries

📅 November 28, 2025 📰 www.recordedfuture.com 🔍 5 CVE(s) referenced

Candiru’s DevilsTongue spyware is being actively deployed via sophisticated, modular infrastructure across multiple countries, targeting high-value individuals and organizations, and driving global privacy, legal, and security risks despite mounting regulatory efforts.

vendor
CVE-2021-1844, CVE-2021-21166, CVE-2021-30551, CVE-2021-33742, CVE-2022-2294

Sign in to access the full report including:
detailed analysis, IOCs, MITRE ATT&CK mapping, and STIX bundle.

🔐 Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

📊 Visual Mindmap
🎯 IOC Extraction
⚔️ MITRE ATT&CK TTPs
📦 STIX 2.1 Bundle