Android Spyware Asin Targets Arabic Users via Fake News, PDF and War Map Apps

Ravie LakshmananJun 05, 2026Spyware / Mobile Security

Arabic-speaking users have emerged as the target of a new Android spyware codenamed Asin, according to findings from ESET.

The Slovakian cybersecurity company said it first detected the malware spread via multiple campaigns in early 2025, with each attack wave making use of distinct websites mimicking utilities, war-related updates, and a government news source:

govlens[.]net, which impersonates a government news source (registered on May 27, 2025)
pdf-reader[.]help, which impersonates a secure PDF editor (registered on May 29, 2025)
live-war-map[.]com, which claims to offer updates on military incidents (registered on January 20, 2025)

Two of these websites – govlens[.]net and live-war-map[.]com – were also marketed via dedicated accounts on social media platforms like Facebook and Telegram –

www.facebook[.]com/GovLens
t[.]me/liveuamap_ar

“Each of these websites distributes a malicious app that combines legitimate functionality with stealthy spyware capabilities,” ESET said.

The cybersecurity company noted that the Telegram channel’s name is likely inspired by Live Universal Awareness Map (Liveuamap), a legitimate, well-known platform dedicated to mapping ongoing conflicts, human rights issues, natural disasters, and geopolitical events across the world.

Multiple artifacts associated with Asin have since been identified, including one uploaded to VirusTotal from Türkiye in October 2025, an APK downloaded from the domain “c-pdf[.]net” in December 2025 by a user on a Xiaomi Redmi Note 13 Pro device running Android 15, and a third sample masquerading as “Syria Defense Map” detected on a Xiaomi Redmi Note 13 Pro+ 5G devices running Android 15 in around mid-January 2026.

In the last case, the APK is said to have been downloaded from a website named “syriadefensemap[.]com.” It’s worth noting that the user is required to manually install the app and grant it the necessary permissions for…

Source