Researchers observed a new wave of Delphi malware called Micropsia developed and operated by the Arid Viper APT group, based out of Gaza since 2017. This campaign targets Palestinian entities and activists using politically-themed lures. The latest iteration of the implant contains multiple RAT and information gathering capabilities. About the threat actor Arid Viper, also known as Desert Falcon, Two-tailed Scorpion, or APT C-23, was first exposed in 2015. This threat actor's main motivation is espionage and information theft. and has been attributed to malicious operators politically motivated towards the liberation of Palestine.