Recent reports have uncovered a concerning Android malware campaign known as “eXotic Visit” specifically targeting users in India and Pakistan. This campaign involves the distribution of malicious apps disguised as legitimate messaging and utility applications, which secretly deploy the XploitSPY remote access trojan (RAT) to compromise devices.
Security researchers from ESET have identified 12 espionage apps containing the XploitSPY malware. These apps were found on the Google Play Store and other third-party app platforms, posing as messaging tools and utility applications. Once installed, the XploitSPY malware can perform various malicious activities, including stealing contacts, files, call logs, SMS messages, and intercepting communications from messaging apps like WhatsApp and Signal. Additionally, it has the capability to record phone calls and capture photos using the device’s camera.
The campaign, attributed to a group named “Virtual Invaders” by ESET researchers, has been active since late 2021. Despite the removal of these apps from the Google Play Store, the threat persists through alternative distribution channels. Install numbers for these apps were notably low, suggesting a highly targeted approach towards specific individuals.
Users in India and Pakistan are urged to exercise caution when downloading applications, especially from sources outside official app stores. To mitigate risks, it is recommended to download apps only from reputable sources, scrutinize app permissions, and employ security software on Android devices.
In summary, the “eXotic Visit” Android malware campaign underscores the importance of vigilance and security measures among users in India and Pakistan to protect against sophisticated threats like the XploitSPY RAT.
See Also- UFC 300 Live Stream – How to Watch Pereira vs. Hill
