Android Spyware Asin Targets Arabic Users via Fake News, PDF and War Map Apps
ID: ba3aa4a8-d4f8-5236-9110-064279dbdd87
STIX ID: report--ba3aa4a8-d4f8-5236-9110-064279dbdd87
Feed Name: The Hacker News
ESET researchers uncovered an Arabic-language targeted Android spyware family dubbed “Asin” spread since early 2025 via fake websites (govlens.net, pdf-reader.help, live-war-map.com) and promoted through social channels; malicious APKs offering legitimate functionality also include stealthy spyware features, with samples and artifacts seen on VirusTotal and on Android 15 devices. Attribution and exact objectives are unknown but the lures suggest journalists and OSINT researchers in Arabic-speaking regions may be primary targets.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.