Since July 2016, 360 Campfire Lab has discovered a two-year espionage campaign against Iranian Android phone users. So far, we have captured 18 Android samples and 5 C&C domain names.

http://blogs.360.cn/post/analysis_of_ArmaRat.html