'eXotic Visit' Spyware Campaign Targets Android Users in India and Pakistan

ESET researchers uncovered an ongoing Android spyware campaign dubbed eXotic Visit targeting users in India and Pakistan since November 2021; malicious apps distributed via dedicated websites and Google Play (now removed) contained XploitSPY RAT functionality to harvest GPS, audio, contacts, messages, notifications, files and more, employing obfuscation, emulator detection and a native library to hide C2 details — the activity is being tracked as operated by a group named "Virtual Invaders" and has affected roughly 380 victims.