Dendroid

Dendroid is an Android malware project that is supposed to provide its operator with unlimited access to the infected Android device. The author of the Dendroid Remote Access Trojan (RAT) has opted to sell it online, instead of executing attacks themselves – this provides them with a steady income revenue, and keeps the law enforcement bodies away from them. Unfortunately, the fact that Dendroid is being sold as a product is bad news for users worldwide since this would enable any cybercriminal with a bit of money to purchase and use this threatening application.

The Dendroid RAT is being sold on various hacking forums, and the author is asking for a one-time payment of $300 – in exchange for the money, the customer will receive 24/7 support, a lifetime license, and access to future updates of the project. The Dendroid project is as simple as it gets, and its operators do not need to be experienced in the cybercrime to operate it – they can use the simple payload creator to configure and disguise a corrupted APK file that they will need to deliver to their victims. Since anyone can use Dendroid, it is safe to assume that crooks will use several methods to spread it to their targets – fake downloads, phishing emails or text messages, bogus social media profiles or pages, and even applications hosted on 3rd-party app stores.

This $300 RAT Allows Anyone to be a Cybercriminal

Once the Dendroid implant is active, attackers will have the ability to access the following features remotely:

• Browse and modify call logs.
• Dial numbers and send text messages.
• Receive notifications for new messages and browse old ones.
• Load Web pages.
• Record calls or microphone audio.
• Use the Camera application and obtain footage from it.
• Load applications.
• Initiate a flood attack against a specified domain or IP address – a non-typical future for Android RATs.
• Redirect the implant to another control server.
  

The Dendroid RAT is not a threat that you should underestimate, considering how widespread it may become eventually. An effectual way to keep your Android device safe is to invest in a trustworthy anti-malware application, as well as be more careful with the online content you interact with – avoid shady websites, unknown applications, and download offers that come from non-trustworthy destinations.