Intel Name: Campaign targeting latin american users distributing btmob rat android malware
Date of Scan: May 27, 2025
Impact: High
Summary: We have discovered new BTMOB RAT Android malware samples being distributed via websites mimicking legitimate services. These fake apps and pages impersonate well-known brands like Starlink, Google Chrome, Avast Antivirus, Roku, Amazon, and more. The primary targets of this campaign are users in Latin America.