BRATA RAT

Malware researchers have identified a new Remote Access Trojan that only works on Android devices and has so far targeted users in one specific region – Brazil. The Trojan is named BRATA (inspired by the 'Brazilian RAT Android') and it is compatible with a broad range of devices since it can run on anything newer than Android 5.0. The authors of this RAT are relying on the Google Play Store to deliver the threatening application to potential targets, and they may often disguise it as a fake copy or update of popular instant messaging software like WhatsApp. Links to the unsafe applications on the Google Play Store may be promoted via various means – sponsored links and advertisements, bogus SMS messages or fraudulent WhatsApp messages.

BRATA Allows Full Control Over an Infected Device

When the BRATA RAT is delivered on a device, it will establish a connection to the Command & Control server used by the perpetrators, and register the newly infected device immediately. This particular RAT works in a very straight-forward way – it provides the attackers with a real-time stream of all that is happening on the screen of the infected device. If the attackers want to interact with the Android device, they can command BRATA to turn off the screen so that the user will not notice what is happening on their device.

BRATA is also able to retrieve basic system details such as the currently registered users and Google accounts, as well as the hardware and software information. It also can display a fake prompt asking the user to enter their passkey to unlock the device. The attackers can also plant additional bogus applications on the device, as well as control the execution and removal of currently available Android apps.

Over 10,000 Users might Have Been Affected by BRATA's Attack

One of the fake WhatsApp updates laced with the BRATA RAT had managed to accumulate 10,000 downloads in just a month, and nearly all of them were confirmed to originate from the Brazilian region. Protecting your device from threats like the BRATA RAT can be accomplished by using a suitable Android anti-malware program, as well as by being extra careful about the types of applications you download on your phone or tablet.