Cybercriminals added a spy module to Travel Mate, an Android app for travelers to India, the source code of which is available on Github. The malware does not resemble a typical Android spy in that the choice of app is rather specific and the malicious code is not based on that of any known spyware. The Trojan’s functions are fairly standard: it sends device data, contact lists, e-mail addresses, and call and text logs to the C&C server.”]
Source: https://securelist.com/gravityrat-the-spy-returns/99097/