Android trojan “DogeRAT” targets Indian users, stealing personal and financial information

An open-source Android virus known as DogeRAT (Remote Access Trojan) has been discovered by CloudSEK, an AI cybersecurity company. 

The malware is distributed via social media and messaging platforms masquerading as legitimate apps, such as Opera Mini, OpenAI ChatGOT, and the premium versions of YouTube, Netflix, and Instagram.

DogeRAT

DogeRAT is a complex Android malware that not only steals personal data but also grants remote access to the infected device. It inundates users with unwanted advertisements and can take control of the victim’s device to send spam, make unauthorized payments, modify files, access call logs, and even capture photos using both front and back cameras.

This includes a premium subscription that is sold at a very low price ($30) with additional features such as screenshot capture, image stealing, clipboard content capture, and keystroke logging.

“The malware has the ability to track device location, record microphone, retrieve contact lists, access call, SMS, clipboard and notification logs, view installed apps, download and upload files, view connectivity status and executing additional commands from the C2 server,” said researcher Jared Wilson.

In a related development, Doctor Web revealed over 100 apps that contained a spyware component called SpinOk – which had been downloaded more than 421 million times through the Google Play Store.

Indicators of Compromise (IoCs)

‍Follow Us on: Twitter, Instagram, Facebook to get the latest security news!