This is the RSS 2.0 feed from www.secnews.physaphae.fr. IT's a simple agragated flow of multiple articles soruces. Liste of sources, can be found on www.secnews.physaphae.fr. 2025-05-10T23:24:09+00:00 www.secnews.physaphae.fr Global Security Mag - Site de news francais Malwares]]> 2024-06-26T10:02:45+00:00 https://www.globalsecuritymag.fr/eset-research-decouvre-aridspy-un-logiciel-espion-android-qui-cible-la.html www.secnews.physaphae.fr/article.php?IdArticle=8525889 False Mobile APT-C-23 2.0000000000000000 RiskIQ - cyber risk firms (now microsoft) 2024-06-24T12:48:47+00:00 https://community.riskiq.com/article/efd9816a www.secnews.physaphae.fr/article.php?IdArticle=8524654 False Ransomware,Malware,Tool,Vulnerability,Threat,Mobile,Cloud APT-C-23 3.0000000000000000 RiskIQ - cyber risk firms (now microsoft) 2024-06-21T02:03:23+00:00 https://community.riskiq.com/article/19d9cd7d www.secnews.physaphae.fr/article.php?IdArticle=8522374 False Malware,Threat,Mobile APT-C-23 2.0000000000000000 HackRead - Chercher Cyber Android users in Egypt and Palestine beware! Arid Viper is distributing malicious third-party apps hiding the AridSpy trojan! Learn how this malware steals your data and how to protect yourself.]]> 2024-06-15T17:10:17+00:00 https://hackread.com/arid-vipers-aridspy-trojan-android-users-palestine-egypt/ www.secnews.physaphae.fr/article.php?IdArticle=8518688 False Malware,Mobile APT-C-23 2.0000000000000000 We Live Security - Editeur Logiciel Antivirus ESET The spyware, called AridSpy by ESET, is distributed through websites that pose as various messaging apps, a job search app, and a Palestinian Civil Registry app]]> 2024-06-14T11:58:03+00:00 https://www.welivesecurity.com/en/videos/arid-viper-spies-android-users-middle-east-week-security-tony-anscombe/ www.secnews.physaphae.fr/article.php?IdArticle=8518490 False Mobile APT-C-23 3.0000000000000000 The Hacker News - The Hacker News est un blog de news de hack (surprenant non?) The threat actor known as Arid Viper has been attributed to a mobile espionage campaign that leverages trojanized Android apps to deliver a spyware strain dubbed AridSpy. "The malware is distributed through dedicated websites impersonating various messaging apps, a job opportunity app, and a Palestinian Civil Registry app," ESET researcher Lukáš Štefanko said in a report published today. "Often]]> 2024-06-13T19:25:00+00:00 https://thehackernews.com/2024/06/arid-viper-launches-mobile-espionage.html www.secnews.physaphae.fr/article.php?IdArticle=8517163 False Malware,Threat,Mobile APT-C-23 3.0000000000000000 InfoSecurity Mag - InfoSecurity Magazine ESET detected five cyber espionage campaigns targeting Android users with trojanized apps deploying \'AridSpy\' spyware]]> 2024-06-13T14:30:00+00:00 https://www.infosecurity-magazine.com/news/arid-viper-egypt-palestine-spyware/ www.secnews.physaphae.fr/article.php?IdArticle=8517212 False Mobile APT-C-23 3.0000000000000000 We Live Security - Editeur Logiciel Antivirus ESET ESET researchers discovered Arid Viper espionage campaigns spreading trojanized apps to Android users in Egypt and Palestine]]> 2024-06-13T09:29:00+00:00 https://www.welivesecurity.com/en/eset-research/arid-viper-poisons-android-apps-with-aridspy/ www.secnews.physaphae.fr/article.php?IdArticle=8517839 False Mobile APT-C-23 3.0000000000000000 RiskIQ - cyber risk firms (now microsoft) #### Description The Arid Viper group has a long history of using mobile malware, including at least four Android spyware families and one short-lived iOS implant, Phenakite. The SpyC23 Android malware family has existed since at least 2019, though shared code between the Arid Viper spyware families dates back to 2017. It was first reported in 2020 by ESET in a campaign where the actor used a third-party app store to distribute weaponized Android packages (APK). That campaign featured several apps designed to mimic Telegram and Android application update managers. Through 2022 and early 2023, Arid Viper developed several newer SpyC23 versions that share these themes: two apps mimick Telegram, while another is internally called APP-UPGRADE but is based on a romance-themed messaging app called Skipped Messenger. Cisco Talos recently reported on the history of Skipped Messenger, revealing that the once-benign dating application was likely passed from the original developer to the Arid Viper actor. #### Reference URL(s) 1. https://www.sentinelone.com/labs/arid-viper-apts-nest-of-spyc23-malware-continues-to-target-android-devices/ #### Publication Date November 6, 2023 #### Author(s) Alex Delamotte ]]> 2023-11-08T21:19:17+00:00 https://community.riskiq.com/article/85abd98a www.secnews.physaphae.fr/article.php?IdArticle=8408110 False Malware,Mobile APT-C-23,APT-C-23 3.0000000000000000 SentinelOne (APT) - Cyber Firms Hamas-aligned threat actor delivers spyware through weaponized apps posing as Telegram or Skipped messenger.]]> 2023-11-06T16:13:44+00:00 https://www.sentinelone.com/labs/arid-viper-apts-nest-of-spyc23-malware-continues-to-target-android-devices/ www.secnews.physaphae.fr/article.php?IdArticle=8406707 False Malware,Threat,Mobile APT-C-23 3.0000000000000000