eXotic Visit includes XploitSPY malware – Week in security with Tony Anscombe

eXotic Visit is an ongoing targeted Android espionage campaign (active since late 2021) that distributed malicious messaging apps bundled with the XploitSPY spyware, primarily impacting users in Pakistan and India (almost 400 victims). The apps were delivered via dedicated websites and some via Google Play, and researchers associate the campaign with the threat actor Virtual Invaders.