Targeting Indian Android users. - DogeRAT is a cheap Trojan | May 31, 2023
Channel: Hacking Space Frontier
Date: 2023-05-31

The information you provided describes a sophisticated malware campaign called DogeRAT, which is being distributed through popular social media apps like YouTube, Netflix, Instagram, and Opera Mini. The malware is disguised as fake Android apps and is circulated through various social media platforms. Indian researchers from CloudSEK's TRIAD team discovered this malware while investigating an SMS stealer scam campaign.

DogeRAT is an open-source Android malware that targets individuals across various industries, with a focus on banking, financial services, insurance, e-commerce, and entertainment sectors. While its primary targets are Indian users, the intention is to expand its reach globally.

The malware disguises itself as legitimate mobile applications, including popular ones like Netflix, YouTube, games, and productivity tools. It is distributed through social media platforms and messaging apps such as Telegram.

Once installed, DogeRAT can extract sensitive information from the victim's device, such as contacts, messages, and banking credentials. It also grants remote access to the compromised device, enabling hackers to perform malicious actions like sending spam messages, unauthorized payments, modifying files, viewing call records, and even capturing photos using the device's cameras.

CloudSEK's investigation revealed that an upgraded version of DogeRAT is being promoted through Telegram channels. This premium version offers additional features like screenshot capturing, image theft, and keylogging. Surprisingly, the premium version is available for as little as ₹2,500.

The author of DogeRAT has established a GitHub repository where the Remote Access Trojan is hosted. The repository includes a video tutorial and a comprehensive list of features and capabilities provided by the malware.

It is important for users to exercise caution while downloading apps, especially from unofficial sources, and to keep their devices updated with the latest security patches. Additionally, using robust antivirus and anti-malware software can help protect against such threats.