New StreamRAT Android Trojan Gives Hackers Full Remote Control Through VNC and Accessibility
Brief
StreamRAT is a new Android banking trojan that gives criminals broad control of an infected phone. It pairs streaming offers with screen viewing, remote actions and deceptive login windows, turning an app download into an account takeover.
The campaign targeted Spanish-speaking Android users through advertisements on Meta platforms and TikTok. One observed advertising push reached 570,000 Meta users between 11 June and 3 July 2026, mainly in Spain. It identified the malware while tracking the streaming-themed Steamtv Esp campaign.
The operators used a phishing site and a multi-stage installation process to steer visitors toward installing an Android package outside official channels.