StreamRat Android Trojan Distributed via Meta Ads Gains Near-Complete Device Control

According to a report published by ThreatFabric and covered by The Hacker News, a new Android banking trojan called StreamRat was distributed via a fake television-streaming campaign on Meta platforms. The advertisement campaign was targeted at Spanish-speaking users, with a primary focus on Spain. ThreatFabric estimates the ad reached approximately 570,950 Meta accounts within the European Union.

The StreamRat trojan is designed to give operators near-complete control of infected Android devices. While specific technical details of the malware's capabilities beyond remote access and banking theft were not extensively detailed in the report, the implication is that operators can perform a wide range of malicious activities on compromised devices. The campaign leveraged fake streaming service advertisements to lure victims into downloading the malicious payload.

ThreatFabric's analysis highlights the growing trend of threat actors using social media advertising platforms to distribute mobile malware. The report notes that no specific patch or mitigation is available for the StreamRat trojan itself; however, users are advised to avoid sideloading applications from unverified sources and to exercise caution when interacting with advertisements promoting streaming services on social media platforms.