BTMOB RAT is an advanced Android malware evolved from SpySolr that spreads via phishing sites and abuses Accessibility Service to steal credentials and control devices. It uses WebSocket-based communication for real-time commands and supports actions such as screen sharing and audio recording. The malware is marketed on
Table of contents
Key TakeawaysOverviewTechnical DetailsConclusionOur RecommendationsMITRE ATT&CK® TechniquesIndicators of Compromise (IOCs)1 Comment
Sort: