Arid Viper poisons Android apps with AridSpy

Read the original on github.com (new tab)

Excerpt

ESET RESEARCH

Arid Viper poisons Android apps with

AridSpy

ESET researchers discovered Arid Viper espionage campaigns spreading trojanized apps to Android users in Egypt and Palestine

Lukas Stefanko

13 Jun 2024 • 25 min. read

ESET researchers have identified five campaigns targeting Android users with trojanized apps. Most probably carried out by the Arid Viper APT group, these campaigns started in 2022 and three of them are still ongoing at the time of the publication of this blogpost. They deploy multistage Android spyware, which we named AridSpy, that downloads first- and second-stage payloads from its C&C serv…

The opening of the report, shown for reference. The full report, with its figures and indicators, is published by GitHub on github.com.