Researchers have uncovered a sophisticated malware campaign known as DogeRAT (Remote Access Trojan), which is being carried out through the distribution of fake Android apps designed to look like legitimate apps. According to a report in CloudSEK, DogeRAT utilises open-source Android malware to steal sensitive information and compromise the security of victims’ devices, impacting various industries, particularly banking, financial services and insurance (BFSI), e-commerce, and entertainment.
How is DogeRAT spread
DogeRAT is spread via social media and messaging platforms disguised as a legitimate mobile app such as a game, productivity tool, or entertainment app such as Netflix, YouTube, and so on.
How DogeRAT operates
Once DogeRAT is installed on a victim’s device, the malware gains unauthorised access and starts collecting sensitive information, including contacts, messages, and banking credentials.
What makes DogeRAT dangerous
“They are not just limited to creating phishing websites, but also distributing modified RATs or repurposing malicious apps to execute scam campaigns that are low-cost and easy to set up, yet yield high returns,” said Anshuman Das, threat intelligence researcher, CloudSEK.
The report claims that the malware can take control of the infected device, enabling malicious actions such as sending spam messages, making unauthorised payments, modifying files, and even remotely capturing photos through the device’s cameras.
The researchers also discovered that DogeRAT’s creator promotes it through Telegram Channels, offering a premium version with additional capabilities such as screenshots, image theft, keylogging, and more. The premium services are being sold at as cheap as Rs 2,500.