From securityaffairs.co
The Earth Empusa threat group is distributing new Android spyware, dubbed ActionSpy, through watering hole attacks to targets Turkic minority group.
Researchers warn that the Earth Empusa (aka POISON CARP/Evil Eye) threat group is targeting the Uyghurs, a Turkic minority ethnic group originating from and culturally affiliated with the general region of Central and East Asia, with new Android spyware dubbed ActionSpy.
The threat actors are spreading the malware through watering hole attacks targeting Tibet, Turkey, and Taiwan,
The malware was first spotted in April 2020, but experts believe the ActionSpy spyware has been active at least since 2017.