Post #2873 8.87K Apr 4, 2026, 07:45 UTC Analysis of cifrat: could this be an evolution of a mobile RAT?https://cert.pl/en/posts/2026/04/cifrat-analysis/ cert.pl Analysis of cifrat: could this be an evolution of a mobile RAT? CERT Polska analyzed a Booking themed Android malware chain delivered through phishing and a fake update website. The sample is a multistage dropper that installs a hidden accessibility controlled RAT with WebSocket C2. 👍 14 ❤ 1