AndroRAT APK 为Android免费下载

AndroRAT Apk is the aptly named Remote Access Tool (or RAT) for Android. If you are not aware, mice provide backdoor functionality to operators, allowing them access to your private systems and data. Androot recently rose to fame for this Webroot blog post highlighting an easy-to-use Android Trojan maker. According to the message, It is the default malicious package bundled with this software.

Andort was a project by students from four French universities. According to its readme, it was completed in a month. This has since been removed from the hosted Github account and for privacy reasons these students are not named here.

Law enforcement provided us with a zip file that appears to be a dump from a GitHub repository. It contains two compiled debug versions of the Android App, their source code, and some class files. Also, it includes all server source code and its dependencies.

By preparing the server to run, I was able to consolidate all source files into a single Eclipse project, add dependencies, and fix imports that didn't match my system. I was pleasantly surprised at how easy it was to do. To test if everything works, I ran Eclipse's server and just loaded the debug Apk. The Debug APK allows the user to easily set the IP address and port of the server.

About AndroRAT Apk

In a previous blog, we talked about the rise of remote access tools (RATs) written in Java that can run on multiple operating systems. With the increasing popularity of Android OS, it is not surprising that Android OS is the latest target and is not immune to RATs. Since late last year, underground forums have been offering an AndroRAT Apk called Android. Dandro. Surprisingly, the underground economy that caters to the needs of cyber criminals created the first tools (dubbed "binders") that allow users to repackage and trojanize legitimate Android apps, including AndroRAT.

In November 2012, an open-source RAT for Android called AndroRAT was released and made available to everyone on the web. Like other RATs, it allows a remote attacker to control the infected device through a user-friendly control panel. For example, It can monitor phone calls and SMS messages on a device and get the device's GPS coordinates, activate and use the camera and microphone,

and access files stored on the device, RAT comes in the form of an APK, which is the standard application format for Android. When used in conjunction with the App Binder, it allows an attacker with limited skills to automate the process of infecting any legitimate Android application with the App, thereby romanizing the application. When a trojanized version of a legitimate application is installed on a device, an unsuspecting user installs AndroRAT along with the legitimate application they intend to install. This allows an attacker to trick parts of the Android security model. To date, Symantec has counted 23 cases of popular legitimate applications infected with the App.

Later, we also saw a commercial Java RAT called Adwind (Backdoor. Adwind), which already supports multiple operating systems and seems to integrate Android modules based on AndroRAT open-source code. This RAT also has a graphical user interface that allows attackers to remotely manage and control the RAT. A demonstration video showing how AdWind runs on Android also shows the presence of AndroATI on infected phones, suggesting that the AdWind authors may have customized the Androati tools to include them in AdWind.

This development is not surprising as the App is open source and easily adaptable to new threats and devices. Symantec's telemetry shows only hundreds of Android. Dendro infections worldwide, with the United States and Turkey being the most affected countries.

However, telemetry has recently reported an increase in the number of infections, which we believe will increase as devices for AndroRAT become more available and mature. The development of remote access tools working on the Android platform was planned.

Although AndroRAT does not yet demonstrate a particularly high level of sophistication, demonstrates the open-source nature of its code, and its growing popularity, it has the potential to evolve and become a more serious threat. We recommend installing a security application like Norton Mobile Security that will detect this threat under the name Android. For general security tips for smartphones and tablets, visit our mobile security site.

AndroRAT Apk Features 

• Get contacts (and all their information)
• Get call logs
• Receive all news
• Location by GPS/Network
• Live to monitor received messages
• Real-time phone status monitoring (answered calls, sent calls, missed calls...)
• Take a picture with the camera
• Streaming audio from a microphone (or another source...).
• Video streaming (only for activity-based subscribers)
• Grilling
• Send an SMS
• Make a call
• Open the URL in your default browser
• Vibrate your phone

AndroRAT is developed

The AndroRAT variants we see today are a far cry from the original open-source code uploaded to GitHub in 2012. The updated coding has improved functionality, making it more stable and harder to detect by malware scanners. With the recent growth of Androrat in the wild, the method of distribution is believed to have improved greatly as well. Its old workbook made it easier to build an infected Apk,

but it still only built one APK at a time. Most likely, new builders have been developed to further automate the process. Creating bulk AndroRAT-infected APK files with legitimate applications.

A RAT is always secret

AndroRAT clients run infected APKs as if they were stealing apps, but with additional malicious functionality running in the background.

Catch the mouse

As always, it's a game of cat and mouse between malware developers and malware researchers. They're constantly bringing new AndroRAT Apk variants into the wild, we'll keep looking for them as soon as they come out. The best way to catch this RAT is to install a good malware scanner on your mobile device and install apps from reputable stores like Google Play. Stay safe out there!

Now everything is free:

AndroRAT Apk was an open-source proof-of-concept that evolved into a true remote access Trojan. It's bad, but it could be worse. At the very least, getting to the victim's phone was difficult and notoriously unstable. Bogdan Botejatu, Senior Threat Analyst at Bitdefender, explained that it was the identity of the APK file that actually weaponized AndroRot. "After using APK Binder, you have an exact copy of cybercrime," Botzatu said.

Once the malicious code is injected into the application, the resulting infected application is smaller and more stable than the original AndroRAT. In addition, the trojan horse applications used to distribute Android, usually pirated, still work perfectly.

It has always been free and open source, but APK Binder's original price is $35. Two months ago, Symantec reported only 23 installations of AndroRAT App. That is until someone rips off the workbook and posts it online for free. "See the irony," Botzatu said.

"The tool was also hacked by others who released it for free." The App infections have increased exponentially since the binder app was released for free. Bitdefender says it has seen 200 infections on devices running Bitdefender's mobile security software since July. Botezatu admits that this is only a fraction of the Android-using population. However, he told me he had seen people bragging about the AndroRAT botnet forum with 500 infected phones.

How did AndroRAT infiltrate my device?

AndroRAT Apk is commonly proliferated using spam campaigns, unauthorized software activation ("cracking") tools, trojans, dubious file/software download sources, and fake software update tools. they send emails with malicious attachments or download links to malicious files.

They often disguise their emails as official and important messages. When recipients open the attached file (or a file downloaded from a website link), it causes them to install the App. Cybercriminals often attach executable files (.exe), archive files like RAR, ZIP, PDF documents,

JavaScript files, and Microsoft Office documents to their emails. Software "cracking" tools activate illegally licensed software (bypassing activation), however, they often install malicious programs and do not activate legitimately installed software.

Trojans are other malicious programs that can cause chain infections.  Examples of other sources used to proliferate AndroRAT include free file-hosting websites, freeware download websites, peer-to-peer networks (e.g., torrent clients, eMule), unauthorized websites, and Third Party Downloaders. Cybercriminals legitimately and regularly scan for malicious files.

When users download and open them, they unknowingly infect their computers with the App. Fake software update tools install AndroRAT Apk instead of updates/fixes for installed programs or exploit bugs/bugs in older software installed on the operating system.

How to download and install the AndroRAT Apk?

Follow the steps below to install this app on Android devices:

• Bug Resolved.
• User-Friendly Interface.
• Speed Boosted