PoisonCarp

Internal ID: ios.poisoncarp

aliases

Last seen:Mar 17, 2026

Intelligence Profile

Malware family identifying ios.poisoncarp. Origin and technical characteristics tracked via Malpedia.

Threat Analysis

PoisonCarp is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→https://blog.trendmicro.com/trendlabs-security-intelligence/new-android-spyware-actionspy-revealed-via-phishing-attacks-from-earth-empusa/

→https://citizenlab.ca/2019/09/poison-carp-tibetan-groups-targeted-with-1-click-mobile-exploits/

→https://googleprojectzero.blogspot.com/2019/08/implant-teardown.html

Quick Facts

TypeAPT / Threat Group

Aliases1

Also Known As

ios.poisoncarp

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search PoisonCarp