A Fake Streaming App Turned Android Phones Into Remote-Controlled Devices
Brief
A free television offer led Android users to a dangerous download. Ads for a streaming service urged them to install an app that could give criminals control of their phones, rather than access to shows. The malware behind the campaign is called StreamRat.
The ads targeted Spanish-speaking users in Spain. One campaign reached about 570,000 Meta users between June 11 and July 3, 2026.
That measures ad reach, not infections. The lure echoes fake streaming apps spreading TrickMo in another Android banking malware campaign. Analysts at Zimperium noted the campaign’s use of social media ads and a staged installation process.
Zimperium said in a report shared with Cyber Security News (CSN) that StreamRat can capture passwords, watch screens and let an operator control infected devices remotely.
The danger extends beyond stolen logins.