AridViper
No sourced public emblem in this profile.
reference profile · reported nexus: PS (not nationality)
AridViper is a state-sponsored APT primarily targeting military personnel, journalists, and dissidents in the Middle East, with a focus on Israel and Palestine. The group employs custom-developed mobile malware, including variants like AridSpy, GnatSpy, and Micropsia, often delivered through spear-phishing emails and deceptive applications. Their operations involve sophisticated social engineering tactics, including the use of fake social media profiles and weaponized apps masquerading as legitimate services. AridViper's activities are characterized by a blend of technical sophistication and psychological manipulation, aiming to exfiltrate sensitive data from compromised systems.
Source-reported aliases: Desert Falcon, Arid Viper, APT-C-23, Bearded Barbie, Two-tailed Scorpion. Associations do not prove equivalence.
Target geography
Catalog-listed countries (associations, not attack counts): 
United States of America · 
Israel · 
State of Palestine
No bound claim-post feed for this label.
Historical casebook
No dated record curated yet; absence does not establish inactivity.
Planned Kinwilder coverage
Tentative editorial review windows, contingent on evidence and review; not promised publication dates or predictions of attacks.
No assigned review window.
References
https://securelist.com/blog/research/68817/the-desert-falcons-targeted-attacks/
https://blog.lookout.com/blog/2017/02/16/viperrat-mobile-apt/
https://securelist.com/blog/incidents/77562/breaking-the-weakest-link-of-the-strongest-chain/
https://www.proofpoint.com/us/threat-insight/post/Operation-Arid-Viper-Slithers-Back-Into-View
https://www.threatconnect.com/blog/kasperagent-malware-campaign/
https://www.sentinelone.com/labs/gaza-cybergang-unified-front-targeting-hamas-opposition/