The latest version of the BRATA malware includes new and dangerous capabilities, such as GPS tracking, the ability to use various communication channels, and a function that wipes all evidence of malicious activity from the machine.
More on BRATA RAT
BRATA (Brazilian Remote Access Tool Android), discovered in 2019, is a malware that was developed to target Android operating systems. The malware quickly evolved into a banking Trojan, combining the capability of complete control over compromised machines with the ability to steal banking credentials.
Cybersecurity experts highlighted the trojan’s first campaign in Europe at the end of last year, where it was observed focusing on stealing login information from e-banking users. According to BleepingComputer, the attack included fraudsters who pretended to be bank customer support agents.
Cleafy’s security experts kept an eye on BRATA for new features, and a new report released yesterday shows how the malware is still evolving.
Attention to Detail
The Remote Access Trojan (RAT) has been updated, and it now targets e-banking users in the United Kingdom, Poland, Italy, Spain, China, and Latin America.
In order to target specific audiences, every version focuses on different financial institutions with customized overlay sets, languages, and even different apps.