BRATA RAT

Almost all of us own a smartphone these days. However, not many of us take in concern the cybersecurity of our smart devices. This is precisely what cyber crooks count on. Malware researchers have detected a new malware targeting Android devices that run an OS recently, which is newer than Andoird 5.0. This threat is called the BRATA RAT (Remote Access Trojan), and it appears to be mainly focusing on Android users located in Brazil. It is likely that the name of this malware is derived from 'Brazilian RAT Android.'

Propagation Methods

The BRATA RAT is being spread on the official Google Play Store where it poses as an update or a bogus copy of a popular application such as the WhatsApp messaging service. It is not certain what is the particular infection vectors used in the propagation of the BRATA RAT. Some believe that this Trojan may be spread via fake messages on instant messaging services, fraudulent regular text messages and various advertisements.

Capabilities

Once the BRATA RAT infects your Android device, it will connect to the C&C (Command & Control) server of its operators. Then, this Trojan will log the new device to the system of the attackers. The BRATA RAT is capable of showing the screen of the compromised device in real-time, as it is being used. In order to prevent the user from stopping the attack, the BRATA RAT can switch off the screen and continue the attack in the shadows. This Trojan also can provide the attackers with some basic information about the infected host's hardware and software. The BRATA RAT is also capable of collecting the password, which unlocks the compromised device by showing the user a bogus prompt that would urge them to fill in their passkey. The attackers can also use the BRATA RAT to remove other present applications as well as employ it as a backdoor in order to infect the host with additional malware.

There are reports that a bogus copy of a WhatsApp update that was carrying the BRATA RAT payload has managed to trick more than 10,000 users into downloading them just in the space of one month. Almost all downloads originated from Brazil. To protect your Android device from threats like the BRATA RAT, you should look into obtaining a reputable security tool that is compatible with your system.