A newly discovered piece of Android spyware called Asin has been hiding inside fake apps designed to look like useful tools for Arabic speakers — including news reader apps, PDF document viewers, and maps tracking active conflicts in the Middle East. Once installed, the spyware quietly records your activity, reads private messages, and sends that data to attackers without any visible sign on your phone.
These fake apps spread primarily through links shared on social media and messaging platforms, bypassing the official Google Play Store entirely. While the current campaign targets Arabic-speaking users specifically, the technique of disguising spyware as a helpful app is used by attackers worldwide. Anyone who installs apps from outside official stores faces this risk.
How to check if you’re affected
Affected devices are Android phones or tablets that have apps installed from outside the official Google Play Store. To check:
- Open your full app list and look for any news, PDF viewer, or map apps you don’t remember installing from the Play Store.
- If you find an app you’re unsure about, uninstall it immediately.
- Go to Settings → Security (or Privacy) and make sure “Install unknown apps” or “Unknown sources” is disabled.
- If you believe your phone may be compromised, run a scan with a reputable security app from the Play Store.