Cyber threat actor Arid Viper, allegedly aligned with Hamas, has been linked to an Android spyware campaign that uses a fake dating app to gather sensitive data from victims, Cybersecurity firm Cisco Talos reported. The spyware hides on victim devices and requests permissions for potentially intrusive actions, such as recording audio and video. The campaign, that started no earlier than April 2022, targets Arabic-speaking users. It shares code similarities with a benign dating app called Skipped.

FIN7 Deploys Anubis Backdoor to Hijack Windows Systems via Compromised SharePoint Sites
The Russian cybercrime group FIN7 is linked to a Python-based backdoor named Anubis, providing them remote access to compromised Windows systems, says Swiss cybersecurity firm