Tag: remote-control

7 Attack Reports | 0 Vulnerabilities

Attack reports

DTO malware that takes notes

Perseus is a new Android threat that builds upon earlier malware families like Cerberus and Phoenix. It enables real-time monitoring and interaction with infected devices through Accessibility-based remote sessions, allowing full Device Takeover. The malware focuses on extracting high-value persona…

overlay attacks

accessibility service

notes monitoring

Published: March 19, 2026

Downloadable IOCs: 3

When your IPTV app terminates your savings

A new Android banking Trojan named Massiv has been discovered, posing a significant threat to mobile banking users. This malware allows remote control of infected devices and enables Device Takeover attacks, leading to fraudulent transactions from victims' accounts. Massiv is distributed through si…

device takeover

overlay attacks

Published: February 19, 2026

Downloadable IOCs: 2

Analysis of Trigona Threat Actor's Latest Attack Cases

The Trigona threat actor continues to target MS-SQL servers through brute-force and dictionary attacks, exploiting weak credentials. They use CLR Shell for additional payloads and employ various tools like BCP, Curl, Bitsadmin, and PowerShell to install malware. The attackers utilize remote control…

Published: October 29, 2025

Downloadable IOCs: 5

New Android Malware Mimics Human Behavior to Evade Detection

A new Android malware called Herodotus has been discovered, designed to perform device takeover while mimicking human behavior to bypass biometric detection. Active campaigns have been observed in Italy and Brazil. Herodotus is being offered as Malware-as-a-Service and shows links to the previously…

credential theft

malware-as-a-service

device takeover

behavior mimicry

Published: October 28, 2025

Downloadable IOCs: 1

Fake Spam Plugin Uses Victim's Domain Name to Evade Detection

A sophisticated SEO spam infection was discovered utilizing a cleverly crafted plugin that mimics the infected domain's name to avoid detection. The malware injects spam content into websites, targeting search engine rankings, and only activates under specific conditions like when a crawler is dete…

evasion techniques

search engine manipulation

stealth malware

plugin disguise

Published: July 6, 2025

Downloadable IOCs: 1

Case of Attacks Targeting MS-SQL Servers to Install Ammyy Admin

A series of attacks targeting poorly managed MS-SQL servers have been identified, involving the installation of Ammyy Admin, a remote control tool. The attackers exploit vulnerable servers, execute commands to gather system information, and use WGet to install additional malware. The installed malw…

privilege escalation

dictionary attack

Published: April 22, 2025

Downloadable IOCs: 0

Python RAT with a Nice Screensharing Feature

A Python Remote Access Trojan (RAT) with advanced capabilities, including a notable screensharing feature, has been discovered. The RAT, based on a two-year-old script, has a low detection rate on VirusTotal. It offers numerous functions to control the victim's computer, such as shell access, webca…

Published: November 5, 2024

Downloadable IOCs: 1

Click here to see more Attack Reports