Novel Android RAT ‘Hirudo’ Replaces Banking Apps With Trojanized Copies
Summary
A new Android malware named Hirudo has been identified, which functions as both a traditional banking trojan and a remote access trojan (RAT). This malware is capable of replacing legitimate banking applications with its own trojanized versions.
IFF Assessment
FOE
The discovery of a new banking trojan and RAT like Hirudo poses a significant threat to users' financial data and device security.
Defender Context
Defenders should be aware of emerging Android malware like Hirudo that combines banking trojan and RAT functionalities. It is crucial to monitor for sophisticated social engineering tactics that trick users into installing malicious applications, and to educate users about the risks of downloading apps from untrusted sources.