s2
--:--:--UTC

Searching APEX

Starting…

  1. Searching Threats, IOCs & Threat Intelligence locally
  2. Querying external providers
  3. Asking AI Forensic Validator
  4. Creating new entry from validated hit

0s elapsed

TF-MAL-apk.rat_on

📛 Threat Title

Malware family: RatOn

Category: RatOn First seen: Last updated: Source: ThreatFox Malwares

Description

ThreatFox malware family `apk.rat_on`. Printable name: RatOn.

Indicators of Compromise (0)

No indicators of compromise on this threat.

References (1)

Remediations (10)

  • web:blog.sucuri.net

    Learn what a Remote Access Trojan is, how RATs work, the risks they pose, and how to protect against infections. We cover the basics, examine real incidents where websites spread RAT infections, and provide practical advice for securing your devices against a RAT.

  • web:thehackernews.com

    A new Android malware called RatOn has evolved from a basic tool capable of conducting Near Field Communication (NFC) relay attacks to a sophisticated remote access trojan with Automated Transfer System (ATS) capabilities to conduct device fraud. " RatOn merges traditional overlay attacks with automatic money transfers and NFC relay functionality - making it a uniquely powerful threat," the ...

  • web:www.breachsense.com

    Complete malware remediation now requires addressing both the infected endpoint and the stolen authentication data. Your malware incident response playbook must account for both.

  • web:www.cdc.gov

    Radon can be found in the air outside and can build up inside buildings and homes. If your home radon level is at or above 4 pCi/L of air, contact a qualified professional to install a radon reduction system. Even if your radon levels are not above 4 pCi/L, consider increasing ventilation and sealing cracks in your home.

  • web:www.crowdstrike.com

    Remediate faster Execute built-in commands or custom scripts to easily carry out complex remediation actions on any managed endpoint remotely. Connect to and quickly isolate the impacted endpoint, then remove malicious files to immediately shut down the attack.

  • web:www.cyfirma.com

    The analysed Raton RAT sample functions as a remote access tool designed to provide an external operator with control over a compromised Windows system. When executed, the malware begins interacting with the local environment and initiates communication with external infrastructure to establish a connection with its operator.

  • web:www.enigmasoftware.com

    SpyHunter is a powerful malware remediation and protection tool designed to help provide users with in-depth system security analysis, detection and removal of a wide range of threats like RatOn Android Malware as well as a one-on-one tech support service.

  • web:www.itfunk.org

    RatOn is a newly discovered Android malware that evolved from NFC-relay attack tools into a fully featured Remote Access Trojan (RAT). It blends overlay attacks, remote access, fake ransomware screens, and banking automation into one aggressive mobile threat.

  • web:www.ncsc.gov.uk

    How to defend organisations against malware or ransomware attacks.

  • web:www.pcrisk.com

    RatOn infections can also have a third stage wherein another payload - the NFSkate malware - is introduced into the system. NFSkate is capable of carrying out NFC relay attacks. RatOn is a RAT (Remote Access Trojan) - a type of malware that allows attackers to remotely access and control infected machines.

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.