CapraTube | Transparent Tribe’s CapraRAT Mimics YouTube to Hijack Android Phones

Executive Summary

• SentinelLabs identified three Android application packages (APK) linked to Transparent Tribe’s CapraRAT mobile remote access trojan (RAT).


• These apps mimic the appearance of YouTube, though they are less fully featured than the legitimate native Android YouTube application.


• CapraRAT is a highly invasive tool that gives the attacker control over much of the data on the Android devices that it infects.

Background

Transparent Tribe is a suspected Pakistani actor known for targeting military and diplomatic personnel in both India …

access android apk application apps attacker executive featured hijack invasive malware analysis mimic mobile packages phones rat remote access remote access trojan sentinellabs tool transparent tribe tribe trojan youtube