Fantasy Hub: Advanced Android RAT Sold on Cybercrime Channels

Researchers at zLabs have discovered Fantasy Hub, a sophisticated Android Remote Access Trojan (RAT) sold as Malware-as-a-Service (MaaS) on cybercrime channels. The spyware, advertised with extensive documentation and Telegram-based subscriptions, enables full device control, data exfiltration, and banking credential theft. Its advanced features, including SMS interception and live streaming, rival nation-state spyware. The malware uses phishing overlays to target major banks and employs sophisticated evasion techniques to avoid detection.

Latest mentioned: 11-10

Earliest mentioned: 11-07

Sources

securityonline.info gbhackers.com

Also Read

Lazarus Group Espionage Campaign Targets Aerospace and Defense

Security researchers at ENKI have uncovered a sophisticated espionage campaign by the Lazarus Group targeting aerospace and defense organizations. The campaign, active since March 2025, uses phishing operations with malicious Word documents disguised as legitimate communications. The new Comebacker backdoor variant demonstrates significant technical evolution, including encrypted command-and-control communications and sophisticated persistence mechanisms. The campaign's focus on specific organizations indicates strategic targeting aligned with espionage objectives.

11-12Read more →