A sophisticated cyberespionage platform called Attor has come to light, sporting an unusual capability for fingerprinting mobile devices as part of its attacks on government and diplomatic victims. ESET researchers say the malware has been used in espionage campaigns as recently as this summer. Attor appears to go after Russian-based, Russian-speaking users, based on geographic telemetry as well as the fact that it was seen snooping on Russian applications; this includes taking screenshots of Russian instant messenger (IM) apps.
Source: https://threatpost.com/sophisticated-spy-kit-russians-gsm-plugin/149095/