Confucius APT Android Spyware Linked to India-Pakistan Conflict | Threat Intel

You are crossing to the page "The Lookout Threat Intelligence team has discovered two novel Android surveillanceware – Hornbill an..."

Click "go to site" if you are sure that the source is safe.

Go to site

Usage Rules

*You may not be able to navigate to the destination site because of AdBlock

Can't see the preview window? Go To direct link

Do you want to remove this redirect page?

You are on the safe preview page for the short link surl.li/kyvfbq. This page is intended to provide the user with full information before proceeding to the destination URL — https://www.lookout.com/threat-intelligence/article/lookout-discovers-novel-confucius-apt-android-spyware-linked-to-india-pakistan-conflict
This page appeared for one or more of the following reasons:

The user created the link surl.li/kyvfbq without registering an account;
A large number of visits to the link has been detected;
No user has yet confirmed ownership of the link and removed the preview page;

On this page, you can review all details of the short link, destination URL, and redirect:

Metadata of the destination link https://www.lookout.com/threat-intelligence/article/lookout-discovers-novel-confucius-apt-android-spyware-linked-to-india-pakistan-conflict;
A screenshot of the page https://www.lookout.com/threat-intelligence/article/lookout-discovers-novel-confucius-apt-android-spyware-linked-to-india-pakistan-conflict that awaits you after the redirect, if the service was able to capture such a screenshot.
Security system check data;
The response status of the destination URL server;
The number of redirects;
Basic statistics

Title: Confucius APT Android Spyware Linked to India-Pakistan Conflict | Threat Intel
Description: The Lookout Threat Intelligence team has discovered two novel Android surveillanceware – Hornbill an...

Statistic surl.li/kyvfbq

Link created: 29-07-2025
Statistics: 53 visits recorded. For detailed statistics and information about geolocation and traffic sources, simply add a “+” to the link surl.li/kyvfbq — or go to the statistics page

Where does the link surl.li/kyvfbq lead?

According to the latest check, the short link surl.li/kyvfbq leads to the destination URL https://www.lookout.com/threat-intelligence/article/lookout-discovers-novel-confucius-apt-android-spyware-linked-to-india-pakistan-conflict. Please note that the registered user who owns the link surl.li/kyvfbq may change the destination URL from the personal account. Information about such a link may change and may not yet be updated in our system. The data in this report is current as of your session, but may differ if the owner has just updated the link.

Is it safe to follow the link surl.li/kyvfbq?

During the verification of the short link (surl.li/kyvfbq) and the destination URL (https://www.lookout.com/threat-intelligence/article/lookout-discovers-novel-confucius-apt-android-spyware-linked-to-india-pakistan-conflict), we determine the following levels of link safety confirmation:

At the time the short link was created, the domain www.lookout.com was not listed in our service blacklists;
Google Safe Browsing confirms that the destination link https://www.lookout.com/threat-intelligence/article/lookout-discovers-novel-confucius-apt-android-spyware-linked-to-india-pakistan-conflict is generally safe to use;
At the time of your current session, there is no open report for the short link surl.li/kyvfbq or the long URL (https://www.lookout.com/threat-intelligence/article/lookout-discovers-novel-confucius-apt-android-spyware-linked-to-india-pakistan-conflict) in the internal surl.li system, or from Google, VirusTotal, CloudFlare, or other internet users;
The link (surl.li/kyvfbq) does not violate the internal rules of the service.

Why do I see this service page at surl.li/kyvfbq?

You are currently on the security page for surl.li/kyvfbq. Here you can view the meta tags and screenshot of the destination link https://www.lookout.com/threat-intelligence/article/lookout-discovers-novel-confucius-apt-android-spyware-linked-to-india-pakistan-conflict.
Surl.li allows unregistered users to shorten links in unlimited quantities. At the same time, in cases of mass use of the service or a large number of visits to a link, the system may automatically enable the safe preview of the destination link.

How can I make surl.li/kyvfbq redirect directly to the destination link?

If you are the owner of the link surl.li/kyvfbq and are ready to guarantee the safety of your visitors when they follow the destination link https://www.lookout.com/threat-intelligence/article/lookout-discovers-novel-confucius-apt-android-spyware-linked-to-india-pakistan-conflict, use the “remove in 1 click” feature on this page. This will allow the link to become direct permanently. In the future, you can create links from your personal account on our paid plans without this redirect page.

How does surl.li fight phishing and spam?

We use a multi-layered filtering system that includes analysis of the Google Safe Browsing database, reports from antivirus laboratories, and our own traffic monitoring algorithms. If a short link violates our Terms of Use or leads to a malicious website, it is blocked automatically without the possibility of recovery.
Unfortunately, malicious actors are constantly improving their bypass and evasion methods, so we recommend always being careful with the links you open.

Report Suspicious Links

The surl.li team has a zero-tolerance policy toward abuse. We promptly investigate every complaint and block links that violate our rules or pose a threat to user safety. Additionally, you can check the safety of a short link using our link checker.

Report abuse