Arid Viper | APT’s Nest of SpyC23 Malware Continues to Target Android Devices

Executive Summary

• Arid Viper is an espionage-motivated cyber threat actor with Hamas-aligned interests. Arid Viper’s toolkit is multi-platform and includes the consistent use and development of mobile spyware since emerging in 2017.


• Through 2022 and 2023, the actor has distributed SpyC23, an Android spyware family, through weaponized apps posing as Telegram or as a dating app called Skipped.


• There are overlaps between recent SpyC23 versions and their 2017 predecessors, tying together several Arid Viper Android malware families.


• Increased industry focus …

actor android android devices android spyware apt arid viper cyber cyber threat development devices distributed emerging espionage executive family hamas malware malware analysis mobile mobile spyware nest platform spyware target threat threat actor toolkit