ThreatFabric has identified RatOn, a sophisticated Android trojan that combines banking RAT capabilities, NFC relay attacks, and cryptocurrency wallet theft, targeting Czech and Slovak users with potential for future expansion. It uses a multi-stage delivery to gain Accessibility Service and Device Admin privileges, performing automated money transfers and overlay attacks.
Latest mentioned: 09-09
Earliest mentioned: 09-09