ArcticRAT, an Android remote access trojan (RAT). It started as spyware aimed at users of 11 cryptocurrency apps and has grown into a modular, AI-assisted tool for full device takeover. The most notable change is that its operators now send stolen SMS and app data to a large language model (LLM) for automated financial triage. […]
Read the original article:
New ArcticRAT Malware Uses Fake VPN Connections to Evade Google Play Protect During Installation
