RatOn Android Malware Emerges as Multi-Vector Threat Targeting Eastern European Users
2 sources · Updated 5mo ago · First seen Sep 15, 2025
The newly discovered RatOn Android malware combines NFC relay attacks, overlay phishing, remote access trojan (RAT) capabilities, and automated transfer system (ATS) fraud. It targets cryptocurrency wallets and Czech banking apps, enabling account takeovers, automated money transfers, and ransomware-like device locking. RatOn is distributed via fake Play Store pages, primarily affecting Czech and Slovak users, and demonstrates advanced evasion and attack techniques.
Do you run this?See affected versions and whether adversaries are exploiting it against assets like yours.
Check your exposure
