CYBERSECURITYTRACKER
TRACKING6,506 stories in this site build1,309 vulnerability news stories in this site build
Permanent story citation

Meta Ads Push StreamRat Android Trojan That Can Gain Near-Complete Device Control

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 5559

As cited

Copy frozen at (site build).

threat intel

Meta Ads Push StreamRat Android Trojan That Can Gain Near-Complete Device Control

Researchers disclosed StreamRat, an Android banking trojan distributed through fake streaming advertisements on Meta, primarily targeting Spanish-speaking users in Spain and the European Union. The malware grants operators near-complete control over infected devices. The campaign reached approximately 571,000 Meta accounts across the EU.

Why it matters: Organizations and individuals in Spain and the EU should assess whether employees or users have installed apps from suspicious streaming services advertised on Meta, as StreamRat provides attackers with broad device control capabilities including potential access to banking credentials and sensitive data.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

threat intel

Meta Ads Push StreamRat Android Trojan That Can Gain Near-Complete Device Control

Researchers disclosed StreamRat, an Android banking trojan distributed through fake streaming advertisements on Meta, primarily targeting Spanish-speaking users in Spain and the European Union. The malware grants operators near-complete control over infected devices. The campaign reached approximately 571,000 Meta accounts across the EU.

Why it matters: Organizations and individuals in Spain and the EU should assess whether employees or users have installed apps from suspicious streaming services advertised on Meta, as StreamRat provides attackers with broad device control capabilities including potential access to banking credentials and sensitive data.

VendorsGoogle
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary