02-09-2026
Chinese-speaking threat actors targeting Mexican Android users with remote access Trojan
https://www.intel471.com/blog/chinese-speaking-threat-actors-targeting-mexican-android-users-with-remote-access-trojan
Report completeness: Low
Threats:
Hvnc_tool
Shella_loader
Btmob_rat
Credential_harvesting_technique
Victims:
Banking and financial institutions, Android users
Industry:
Financial
Geo:
Mexico, Chinese, Nigeria, Mexican
TTPs:
ChatGPT TTPs:
do not use without manual checkT1027, T1027.013, T1036.005, T1071.001, T1140, T1204.002, T1417, T1437, T1513, T1583.001, have more...
Soft:
Android, Google Play
Platforms:
intel