Transparent Tribe, an advanced persistent threat (APT) group that has been active since at least 2013, has begun deploying a new mobile malware tool in its cyber espionage campaigns. Researchers from Kaspersky this week reported observing the group actively targeting Android users in India with spyware disguised as a couple of popular apps. Once installed on a system, the malware has been observed downloading new apps and accessing SMS messages, call logs, and the device’s microphone. The group’s primary malware up until now has been “Crimson RAT,” a custom-based RAT delivered via malicious documents with an embedded macro.”]