Malware
SideWinder
SideWinder involved a fake VPN app for Android devices published on Google Play Store along with a custom tool that filters victims for better targeting.
SideWinder is a Android malware family operated by RAZOR TIGER.
Background
SideWinder centered on a counterfeit VPN app for Android published to the Google Play Store, paired with a bespoke tool that screens victims to sharpen targeting.
Source: Malpedia (Fraunhofer FKIE).