New Android Spyware 'Asin' Targets Arabic-Speaking Users via Fake Apps and Websites

A new Android spyware named Asin has been targeting Arabic-speaking users, identified by Slovakian cybersecurity firm ESET in early 2025. The malware was distributed through multiple campaigns using fake websites impersonating utilities, war-related updates, and a government news source, including the domain govlens[.]net. Asin was spread via malicious apps disguised as legitimate tools, such as PDF readers and war maps. The attacks specifically focused on users in Arabic-speaking regions, though no exact victim count or additional technical indicators were disclosed. No CVE IDs or further exploitation details were provided in the findings.