Arid Viper APT Group targets Android users in the Middle East with trojanized apps impersonating legitimate ones, exfiltrating login details. Campaigns involved using myScript.js to connect distribution websites and evolve malware. Multi-stage spyware discovered targeting users in Palestine and Egypt, distributed through fake websites. Malicious apps disguised as legitimate messaging apps contain AridSpy malware. Attacks utilize social engineering to distribute trojanized apps. Malware steals user data, snoops on Facebook Messenger and WhatsApp communications. Trojanized apps deliver malicious functionality through second-stage payload. Active malware maintenance indicated by increasing versions. Second-stage payload likely contains latest malware updates. #AridViper #AndroidMalware #SpywareCampaigns #TrojanizedApps
https://cybersecuritynews.com/arid-viper-android-apps-exfiltrate-login/
GenAINews.top / Herjan Security
npub1k7…436zj
2024-06-17 12:15:42
Author Public Key
npub1k7kxqar86wqd5w2kzqn6t0gq4yqwnxjkqx03yldkr7r28jzza7mqk436zjPublished at
2024-06-17 12:15:42Event JSON
{
"id": "b6cf654df17e8e9949163777747f4890a3a56d70f1e16c008a4c6ce1bc707f03",
"pubkey": "b7ac607467d380da39561027a5bd00a900e99a56019f127db61f86a3c842efb6",
"created_at": 1718619342,
"kind": 1,
"tags": [],
"content": "Arid Viper APT Group targets Android users in the Middle East with trojanized apps impersonating legitimate ones, exfiltrating login details. Campaigns involved using myScript.js to connect distribution websites and evolve malware. Multi-stage spyware discovered targeting users in Palestine and Egypt, distributed through fake websites. Malicious apps disguised as legitimate messaging apps contain AridSpy malware. Attacks utilize social engineering to distribute trojanized apps. Malware steals user data, snoops on Facebook Messenger and WhatsApp communications. Trojanized apps deliver malicious functionality through second-stage payload. Active malware maintenance indicated by increasing versions. Second-stage payload likely contains latest malware updates. #AridViper #AndroidMalware #SpywareCampaigns #TrojanizedApps \n https://cybersecuritynews.com/arid-viper-android-apps-exfiltrate-login/",
"sig": "97c7efad6e7258fa7dd7a766df6dda08bfc7d90b671e033a680817895cd677cc07af173e64c7e4b3faa5579c6e81801ccb764949aa71d85c1154d0ee7799d397"
}