BTMobは、WebSocketを用いたコマンド&コントロール(C2)通信によって、攻撃者が感染デバイスへリアルタイムでコマンドを送信できるAndroid遠隔操作型トロイの木馬(RAT)です。 このマルウェアは、より広範なCraxsRATおよびSpySolrのエコシステムと関連があり、銀行口座情報の窃取、デバイス監視

На Android-устройствах появились вирусы CraxsRAT и NFCGate, которые используют новые способы кибермошенничества, направленные на кражу данных банковских карт

Новый опасный метод кражи данных на Android — вирусы CraxsRAT и NFCGate, способные управлять мобильным банкингом и красть деньги с карт

На Android распространяется новый вирусный дуэт CraxsRAT и NFCGate, позволяющий мошенникам удалённо управлять смартфонами и красть деньги с банковских карт

In a concerning development in the cybersecurity landscape, the latest version of CraxsRAT, known as v7.4, has been released with claims of

A Syrian threat actor, EVLF, has been identified as the developer of malware tools CypherRAT and CraxsRAT.

Cyfirma security researchers uncover the real identity of the CypherRAT and CraxsRAT malware developer and MaaS operator.

The post details an investigation into EagleSpy V6.0, a rebranded version of CraxsRAT, sold via Odysee and Telegram. The malware includes features such as banking phishing overlays, crypto wallet theft, remote shell execution, keylogging, and ransomware components, along with evasion techniques like DEX packers. The seller scammed the investigator after payment and blocked communication, while the analysis revealed real victim infrastructure and potential risks to buyers. The malware is distributed through the Odysee channel *@justicerat:e* and Telegram handle *@JustIcedevs*.

Analysts from the company F6 have uncovered new attacks against customers of Russian banks using the duo of the Android Trojan CraxsRAT and the application NFCGate. Cybercriminals can now remotely install malicious software on users' devices, capable of intercepting bank card data via NFC modules without requiring a phone call.

#RemoteAccessTrojan

#RemoteAccessTrojan

YouTube video by Makavael

A Syrian threat actor, EVLF, has been identified as the developer of malware tools CypherRAT and CraxsRAT.