Wednesday, 24 July 2013

Android Remote Access Trojan for Sale, Cheap!

Androrat APK Binder
Computer viruses replicate indiscriminately, spreading their infection at every opportunity. A Remote-Access Trojan, or RAT, is a targeted tool, and that makes it quite a different story. When a PC has a RAT running, the RAT's owner can download files, run programs, spy using your webcam... the RAT gives total control. RATs exist for Android too, and for just $37 you can easily create a Trojan that will install your very own Android RAT. Scary? You bet! Open-Source Origins
RAT can also stand for the safer-sounding phrase "Remote Administration Tool." That's the phrase used to describe the open-source tool Androrat, which provides the actual remote control and monitoring. Written by a team of four French university students, the tool consists of two parts, a client written in Java Android and a server written in Java/Swing.
Looking at the project's home page you'll find a laundry list of actions that the remote controller can trigger on the Android device. The list includes, but isn't limited to: get all contacts, call logs, and messages; get the device's location by GPS or network; monitor phone calls and texts in real time; stream sound from the microphone; and send a text.
The client runs as a service that starts during the boot process. That means it can run without the phone owner's knowledge. Of course the RAT-herder won't be managing it all the time, but a simple text can engage the phone's connection to the server.
Send in the Trojans
Androrat is a free, open-source project that anybody can download and use. With full access to someone's phone, you could just install it manually. What you get for your $37 is the Androrat APK Binder. Using this simple tool, you can take the APK file for any Android app and inject Androrat's code into it. Of course you'll have to somehow convince your victim to run the Trojanized app.
The Binder's author strongly advises that you start by learning how to use Androrat. He points out that he is not the creator of Androrat and does not offer Androrat support. And he doesn't offer refunds. Still, for $37 even someone with only minimal skillz can create an effective Trojan that will install Androrat.

No comments:

Post a Comment