TF-MAL-apk.ratmilad
📛 Threat Title
Malware family: RatMilad
Description
ThreatFox malware family `apk.ratmilad`. Printable name: RatMilad.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
domain
apk.ratmilad
VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.ratmilad
IOC database
- Type
- domain
- Value
apk.ratmilad- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Extracted from Threat TF-MAL-apk.ratmilad
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/apk.ratmilad
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (10)
-
web:attack.mitre.org
RatMilad is an Android remote access tool (RAT) with spyware functionality that has been used to target enterprise mobile devices in the Middle East since at least 2021. Variants of RatMilad have been disguised as VPN applications and a fake app named NumRent. Upon installation, RatMilad employs multiple Collection techniques to collect sensitive information before uploading the collected data ...
-
web:malpedia.caad.fkie.fraunhofer.de
RatMilad , a newly discovered Android spyware, has been stealing data from mobile devices in the Middle East. The malware is spread through links on social media and pretends to be applications for services like VPN and phone number spoofing. Unwary users download these trojan applications and grant access to malware .
-
web:windowsforum.com
Microsoft's March cumulative update for Windows 11, KB5079473 (released March 10, 2026), is rolling out with a familiar mix of new features and security fixes — but a growing number of users now say the patch is also triggering severe instability on some machines, including hard freezes...
-
web:www.darkreading.com
RatMilad Spyware Scurries onto Enterprise Android Phones A novel mobile malware found lurking behind a phone-spoofing app is being distributed via Telegram and a dedicated website, in a broad ...
-
web:www.infosecurity-magazine.com
A newly discovered Android spyware family dubbed 'RatMilad' has been observed trying to infect an enterprise device in the Middle East. The discovery comes from security researchers at Zimperium, who said the original variant of the previously unknown RatMilad spyware hid behind a VPN and phone number spoofing app called Text Me.
-
web:www.pcrisk.com
What kind of malware is RatMilad ? RatMilad is the name of an Android Remote Access Trojan (RAT) with spyware capabilities targeting users in the Middle Eastern. It is known that this malware is distributed via NumRent - a VPN and phone number spoofing application. Previously, RatMilad was hiding behind an app called Text Me. NumRent is renamed and graphically modified version of the Text Me ...
-
web:www.researchgate.net
Prevention and detection of eBPF-based malware is also explored, with the goal of providing organizations or legitimate users of eBPF techniques to harden their systems against eBPF-based malware ...
-
web:www.securitysolutionsmedia.com
October 10, 2022 Zimperium, the only mobile security platform purpose-built for enterprise environments, has published details of a newly-discovered Android spyware family dubbed RatMilad . The Zimperium zLabs research team uncovered the RatMilad spyware sample after a failed infection of an enterprise device in the Middle East protected by Zimperium's on-device machine-learning malware engine.
-
web:www.tomsguide.com
Due to the wealth of information RatMilad can collect and the series of malicious actions it can perform on an infected device, cybercriminals will likely continue to utilize the spyware in their ...
-
web:zimperium.com
The Zimperium zLabs research team discovered spyware targeting Middle Eastern enterprise mobile devices and began monitoring the activity of a novel Android spyware family that we have since named RatMilad . Learn how Zimperium zIPS customers are protected against RatMilad spyware. Read more.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.