GravityRAT Remote Access Trojan (RAT) has been under active development by what looks like Pakistani hacker groups since at least 2015 and has been deployed in targeted attacks against Indian military organizations. The malware authors are now signing their code using digital signatures to make their booby-trapped apps look legitimate. Researchers at Kaspersky found 10 versions of the malware were found, being distributed under the guise of legitimate applications. The infection vector in the case of these updated samples remains unknown, with targets being sent download links to the malicious apps just as it happened in the past.
Source: https://www.bleepingcomputer.com/news/security/windows-gravityrat-malware-now-also-targets-android-macos/