UMHooker

Tool

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

December 4, 2025

Last Seen

December 4, 2025

API

UMHooker is an offensive cybersecurity tool/implant associated with a sanctioned spyware vendor, used to target iOS devices by exploiting an iOS zero-day to gain covert remote access.

Overview

Recent Events

Relationships

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Related Clusters (1)

Intellexa's Spyware Access and Evasion of Sanctions Revealed

Dec 4·11 sources

Related Entities

Preyhunter Malware Privilege Escalation Remote Code Execution Angola Egypt Kazakhstan Mongolia Pakistan Russia Saudi Arabia Tajikistan

UMHooker

Overview

Recent Events

Profile

Used By

Associated Malware

Attack Types

MITRE Techniques

Platforms

Regions

Sectors Targeted

Relationships

Related Clusters (1)

Intellexa's Spyware Access and Evasion of Sanctions Revealed

Related Articles (1)

Sanctioned Spyware Vendor Used iOS Zero

Related Entities