Arid Viper poisons Android apps with AridSpy

ESET Research describes AridSpy, a maintained, multistage Android spyware family likely operated by the Arid Viper APT and distributed via dedicated websites and trojanized apps targeting users in Palestine and Egypt; the report provides a full technical analysis (staged payloads, Firebase C2 and separate exfiltration domains, accessibility abuse, keylogging, audio/video capture), IoCs (hashes, domains, IPs) and MITRE ATT&CK mappings to support detection and mitigation.