ctrlINT What the industry said about every indicator, with the quote

BTMOB RATMalware

According to Cyble, this is an advanced Android malware evolved from SpySolr that features remote control, credential theft, and data exfiltration. It spreads via phishing sites impersonating streaming services like iNat TV and fake mining platforms. The malware abuses Android’s Accessibility Service to unlock devices, log keystrokes, and automate credential theft through injections.From MISP Galaxy

Last reported 4 days ago, by The Hacker News1 report

Reports per month

last 12 months

October so far (hatched). Counted by report, not by story.

What the reports say

1 report, newest first · the exact sentence from each
  1. “UAC-0263 distributes BTMOB RAT, which gives the threat actor control over the infected device and the ability to exfiltrate data.”

    The Hacker NewsNews
    Russian APT28 Breaches NATO Naval Shipbuilder in NATO Country, Deploys New Reflective Loader

Indicators in its reports

named in the reports above
Copy these 6 indicators · defanged

Thanks — we review every report.

Report a wrong match
What is wrong with BTMOB RAT here?
No account needed. We do not store your IP address.