The group behind this Android spyware is APT-C-23 that has been targeting Palestine and other countries in the Middle East for the last couple of years.
With multiple black hat groups existing, cybersecurity researchers track them to learn more about their respective patterns. This not only helps in fighting future threats but also offers greater insight into the motives of each group.
Keeping this in mind, a threat actor named APT-C-23/Two-tailed Scorpion is known for basing its targets in the Middle East using Windows and Android run malware.
It is worth noting that in April 2018 the same group was caught using Android malware called ViperRAT against Palestinians. At that time, ViperRAT was being distributed from Play Store.
A timeline of discovering different versions of the malware
Recently, however, researchers from ESET have found that the Android version of the spyware is starkly different from previous versions marking a shift in its capabilities.
See: Shoe give away scam hits Android users with malware on Play Store
Known as Android/SpyC23.A; the previous version included features such as the ability to take photos, download/delete files, uninstall applications, steal SMS messages, contacts, and sim credit balances. Now, the new one has extended features in addition to the previous ones enabling it to do the following things wh ..
Support the originator by clicking the read the rest link below.
