TGViewer
CTT Report Hub CTT Report Hub @aptreports · 3.52K subscribers
Post #32070 35
#ParsedReport #CompletenessMedium
02-09-2026

Uncovering StreamRat: From Meta Ads to Full Device Takeover

https://www.threatfabric.com/blogs/from-meta-ads-to-full-device-takeover-uncovering-streamrat

Report completeness: Medium

Threats:
Streamrat
Credential_stealing_technique
Mirax
Godfather
Hvnc_tool
Sturnus

Victims:
Banking sector, Meta users, Spanish speaking users

Industry:
Media, Financial

Geo:
Spain

ChatGPT TTPs:
do not use without manual check
T1036, T1041, T1056.002, T1059.007, T1070.004, T1071.001, T1082, T1105, T1113, T1119, have more...

IOCs:
File: 5
Hash: 2
IP: 2

Soft:
Android, TikTok, Instagram, Telegram, Chrome, Google Play

Functions:
createVirtualDisplay, takeScreenshot, performGlobalAction

Languages:
javascript
ThreatFabric Uncovering StreamRat: From Meta Ads to Full Device Takeover ThreatFabric researchers have uncovered StreamRat, a new Android banking trojan promoted to Spanish-speaking users through Meta and TikTok advertisements.
More from @aptreports
  1. Oct 12, 2026#ParsedReport #ChatGPT #Translated Autotext: (TI Report Analyser + ChatGPT + Auto Translat…
  2. Oct 12, 2026#ParsedReport #GeneratedSchema Generated with GPT-4
  3. Oct 12, 2026#ParsedReport #CompletenessLow 09-10-2026 It Always Comes Back to DNS: Iranian VPN-over-DN…
  4. Oct 12, 2026#ParsedReport #ChatGPT #Translated Autotext: (TI Report Analyser + ChatGPT + Auto Translat…
  5. Oct 12, 2026#ParsedReport #GeneratedSchema Generated with GPT-4
  6. Oct 12, 2026#ParsedReport #CompletenessMedium 11-10-2026 GhostAction Phishing Campaign https://opensou…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →