Verified: Craxs Rat
This public link is valid for 7 days and shares a thread, including any personal information you added. This link or copies made by others cannot be deleted. If you share with third parties, their policies apply. Can’t copy the link right now. Try again later. CraxsRAT: Android Remote Access malware strikes in Malaysia
The technical analysis reveals that the code in the Android package generated from the CraxsRAT builder is highly obfuscated, coming in different types of builds, and providing options to threat actors for planting malicious applications, according to type of attack. There is even a custom option to inject a web view page during payload generation, which opens a malicious website once downloaded. The builder also allows the threat actor to choose package names, including app name, and to choose features according to their requirements, making the generated Android package suitable for specific types of attacks. craxs rat verified