CapraRAT Spyware Disguised as Popular Apps Threatens Android Users
As part of a social engineering strategy to target specific people of interest, the threat actor Transparent Tribe has persisted in releasing Android apps that are infected with malware.
According to SentinelOne security researcher Alex Delamotte, in a recent article shared with The Hacker News, these APKs carry on the group's practice of inserting spyware into carefully chosen video browsing programs. The new expansion is aimed at mobile gamers, followers of TikTok, and admirers of weaponry.
The cybersecurity company first described the campaign, known as CapraTube, in September 2023. The hacking team used weaponized Android apps that looked like genuine apps, such as YouTube, to distribute a spyware known as CapraRAT, which is a modified version of AndroRAT that can collect a vari...