RAT Java/Kotlin Active since 2022

HookAndroid

Hook Android RAT 2022 $7000/month Godfather developer. VNC+Overlay+WebSocket C2. Chrome fake update.

Threat Profile
Type RAT
Programming LanguageJava/Kotlin
C2 ProtocolHTTPS
First Seen2022
Targets Android Banka Kullanicilari
Purpose / Capabilities
  • Android Banking RAT
No C2 servers have been identified for this family yet.

Research Reports (2)

Critical

Hook Android RAT -- ermak.apk, Chrome Güncelleme Sahte Overlay, Accessibility Servis | Kritik

Hook Android 2.6MB ermak.apk. "Turn on Chrome Update to complete" sahte overlay. AccessibilityService. ic_chrome.xml sahte ikon.

Read Report →
Critical

Hook Android -- APK 8.7MB, Turkce Paylasim Kaplama, Slovenya Bank Kaplama, C2 Config | Kritik

Hook Android 8.7MB APK. Türkçe paylaşım kaplama + Slovenya banka kaplama. C2 config fragmanları.

Read Report →