The Arid Viper APT group is deploying AridSpy malware with Trojanized messaging applications and second-stage data exfiltration.