Arid Viper Camouflages Malware in Knockoff Dating App

The APT group Arid Viper is targeting Arabic-speaking Android users with a malicious version of a dating app called Skipped. The app, which is available on the Google Play store, shares malicious links masquerading as updates, leading users to a custom malware. The malware disables security notifications, collects user information, and deploys additional malicious applications. The campaign has been active since April 2022.