Intel Name: Pjobrat makes a comeback, takes another crack at chat apps
Date of Scan: March 28, 2025
Impact: High
Summary: In 2021, researchers reported that PJobRAT, an Android RAT first seen in 2019, targeted Indian military personnel by mimicking dating and messaging apps. Since then, little has been reported—until a recent threat hunt uncovered a now-concluded campaign targeting users in Taiwan. PJobRAT can steal SMS messages, contacts, device details, documents, and media files from infected Android devices. In this latest campaign, researchers found PJobRAT samples posing as instant messaging apps, with all identified victims based in Taiwan.
