Malicious Android spyware tools used for cyberespionage campaigns in South Asia are linked to “Confucius,” a pro-India advanced persistent threat group. The malware is designed to exfiltrate SMS, encrypted messaging app content, geolocation data and other sensitive information from Android devices. Confucius, active since 2013, mainly targets victims in Pakistan and other parts of South Asia, security firm Lookout says. Malicious functionality present in SunBird and Hornbill is believed to be derived from commercial surveillanceware developed in India.”]
Source: https://www.govinfosecurity.com/pro-india-apt-group-deploys-android-spyware-a-15974