{
  "name": "A stealthy RAT burrowing deep into Android devices",
  "slug": "a-stealthy-rat-burrowing-deep-into-android-devices",
  "description": "BTMOB is an Android remote access trojan that evolved from SpySolr malware and poses significant threats beyond traditional banking trojans. The malware combines phishing-led delivery with an APK builder interface that enables rapid payload generation without coding skills. Distributed through fake app stores impersonating streaming services, cryptocurrency platforms, and government agencies, BTMOB abuses Android Accessibility Services to gain elevated permissions. Marketed as malware-as-a-service with a reported $5,000 lifetime license, it provides adversaries with capabilities to exfiltrate sensitive data, capture screenshots, record device activity, and establish remote control. The tool's customizable phishing lures have been adapted for specific regions, including campaigns impersonating Argentine tax authorities, making it a rapidly evolving threat with global reach.",
  "published": "2026-05-31T23:32:45.408000+00:00",
  "created_at": "2026-06-01T08:50:58.960000+00:00",
  "modified_at": "2026-06-01T06:50:59+00:00",
  "created_at_opencti": "2026-06-01T08:50:58.960000+00:00",
  "author": "AlienVault",
  "confidence": 100,
  "report_types": [
    "threat-report"
  ],
  "labels": [
    "accessibility abuse",
    "android rat",
    "apk builder",
    "brazil",
    "btmob",
    "latin america",
    "malware-as-a-service",
    "phishing campaigns",
    "remote access",
    "spysolr",
    "spysolr evolution"
  ],
  "tags": [
    "2026-05-31",
    "accessibility abuse",
    "android rat",
    "apk-builder",
    "brazil",
    "btmob",
    "latin america",
    "malware-as-a-service",
    "phishing campaigns",
    "remote access",
    "spysolr",
    "spysolr evolution"
  ],
  "related_entities": {
    "indicators": [
      {
        "id": "e249dcb6-139a-496d-a991-0e95aeaa0856",
        "name": "c6199e175fb988cbbeacdf0f5acdf9ed83f5bdaae5c95b7a6c27ee72cd11b0b1"
      },
      {
        "id": "b4a8cab6-2caf-44fb-b37e-6c683a16c1b2",
        "name": "aa56f350882ce63429c6626567487b041f06168bb60f4fc371a262eabadfa660"
      },
      {
        "id": "cab520b8-cbe1-44f3-b78f-e74f73c58a3c",
        "name": "0628ad6d1fd836b13b22e75fa169502d8ce78b7ad20f0261eb5151da98437bca"
      },
      {
        "id": "484cd34d-5664-4559-946a-5fc0c8d987c5",
        "name": "a892f1ef2e530d67bf948a48c734da3f27718eb8b883ca0b686ddb0a81071731"
      },
      {
        "id": "301f627b-fc40-4686-8e5b-3a60de0e5792",
        "name": "6ae94ce710016d86ed7457236deef2c4c51478587f3609b6e827a348828b3931"
      },
      {
        "id": "821b830e-9711-4071-b178-39ea3658b0d4",
        "name": "191.96.79.179"
      },
      {
        "id": "3995d47a-a849-40c1-b931-4775e63ad17a",
        "name": "7ac974899e8e05aaacd417577c97e382d5e8c5f7f4a85632cffb47ec2f6ae4e0"
      },
      {
        "id": "0cb25ea5-eb0c-4e55-9def-f21a91654789",
        "name": "195.160.221.203"
      },
      {
        "id": "8d980fc8-4d70-42ba-80a0-ffc21f532221",
        "name": "a1e457c52eab430c20d48f2ac476e080386313f16efb135a0471902cf68ce475"
      },
      {
        "id": "2bc710ec-7cd6-480e-9bd7-4b8b25827ab1",
        "name": "1a60cb5f7e2fb7c09fc3dc8459108b26ac98ee73131f37a28cfdad5fc75b7a7d"
      },
      {
        "id": "7d1ce2c0-bd4c-4ed5-80ba-cdf00f4e6713",
        "name": "2525d1e427a9983b0b4ca0906a4b44ffb9814b23d53fd8a2e3ab6512b027c733"
      },
      {
        "id": "110206b5-58bb-4648-aa39-524389406d85",
        "name": "5a4e86bbcf0ebc455d2995db225d9ad682e9b37b6bad472a604a462099d988bd"
      },
      {
        "id": "665d0135-d29a-45c3-b955-1e9ec4e737e6",
        "name": "191.96.224.87"
      },
      {
        "id": "adfb0fa3-8e5e-4721-a3fa-5dedbf609204",
        "name": "191.96.78.28"
      },
      {
        "id": "b8747407-abf7-4ce7-9a9d-68cb1baa0d44",
        "name": "702261ba38b57ecc3a5407fed28b2f0611a74c2ec0c116aea4f9e6def0899aed"
      },
      {
        "id": "b3cca546-a1ea-4cef-bbe6-d121579767e7",
        "name": "676cb2d0a60403afc06cea1b572cb7261f706365fac65621b5a4907893e7ac0d"
      },
      {
        "id": "0a9b65a2-6790-4007-9876-a867d588ad66",
        "name": "998a7ed1572ad9dc11375bc25294e1954e606b7cff9fabc5c120713e597cd274"
      },
      {
        "id": "ea16021d-d59b-42df-b475-7ffee4bc2510",
        "name": "6101d1e1811db052f869f7eb3402dad28da7e92103d4a44ee43f95846a075012"
      },
      {
        "id": "0b77fecf-fdbd-4643-b420-2f0f691d3b80",
        "name": "58ac130a8ebb09e37592ac69841483edc5695d1545b1f04f23d5b760ac17cd94"
      },
      {
        "id": "32b6db0d-be6f-4d99-b3d3-ffd11a1d9ce4",
        "name": "0a542751724a432a8448324613e0ce10393e41739a1800cbb7d5a2c648fcdc35"
      },
      {
        "id": "f0074f56-7dea-4d81-aaaa-861229724a0d",
        "name": "arbsniper.com"
      },
      {
        "id": "8bcc4378-9c0f-4cae-a32f-9032556b74c0",
        "name": "8f09274e808e0063d51f34cac82a5770b3df30c792e426da2f6a80657f27affc"
      },
      {
        "id": "228008c7-d672-495c-b73b-4f7ed1d15620",
        "name": "140a7f995b0336942691a2e93e2017fd575267c017c7d0728d69169306f91963"
      },
      {
        "id": "082c81b9-b625-4b30-b3be-5cc42f38edef",
        "name": "6844ce1539014571360495c6fb50965e813c2721663bdd40d577d9e5163773c6"
      },
      {
        "id": "9e266876-6955-424f-b25f-c3b8e158f56a",
        "name": "5aaaf972c8bf39a98f2748e526de3cc0370ba831997d7d9765cdaba599645c0d"
      },
      {
        "id": "408d4388-5a92-4324-b4da-a347477367dd",
        "name": "e5a9fdff900dd502e8f3dce52d2d1b69aa9afafb5094a28f9037e8770db0e63b"
      },
      {
        "id": "45415276-4e13-4ad0-961c-cc6b610d212c",
        "name": "191.96.79.133"
      },
      {
        "id": "450edc68-acc3-4db1-91fa-c0af74460398",
        "name": "244d81fd9908cd17815501d4edadeb1baf1c421aa25d8bd61c7cb481c939540e"
      },
      {
        "id": "537bc36a-580a-4d72-b94b-e44e55fa8c15",
        "name": "26a2268281e8043125ef72b92f8980b42912048753d56894bc378fb54c7c188a"
      },
      {
        "id": "2418ca15-dddb-4099-a70a-dd2e8cd1b1ff",
        "name": "191.96.79.41"
      },
      {
        "id": "0d3fd279-ad52-4496-9d4c-bd3398148501",
        "name": "6bba64fa9e8a7b11cb2476cd071de08986db44b0783eff211c68fa5594ef8143"
      },
      {
        "id": "4e27693b-8934-4850-aa4a-dc90a94426ed",
        "name": "75dd4fb011ed598374a46fc0d9c0d1d64a298341c34afc83a56a6983cfd27764"
      },
      {
        "id": "776c7346-c07d-495a-b54d-3d16032994f7",
        "name": "168f50bf9a87099094ef410e3ac33e676a6a8740a5437cd09e7b63d73df8431a"
      },
      {
        "id": "2c92d655-49d6-4b21-8de0-229c4f0cde8e",
        "name": "200.9.155.153"
      },
      {
        "id": "4540f23a-fd69-4d72-8574-6a8af3f4f484",
        "name": "d55057cd9110d12a192281356f06b94f342b9febb305cf0a5898a7e6af40758f"
      },
      {
        "id": "be1e816b-5aad-4ffc-aebd-09c85d81c6e5",
        "name": "02a52c4cc11748d44c9b49d508ee4e46425661981fa1406f30ec0830cb69ddc5"
      },
      {
        "id": "d30fa143-7355-4651-82fb-b4f0673ba58b",
        "name": "f76b13040c634f82a8332ff9443d84c89a5bced51ae9adad7fd15c05fadb4324"
      },
      {
        "id": "36589df9-3bd8-484b-a8f8-b76277909c36",
        "name": "191.96.225.241"
      },
      {
        "id": "6babbad6-86dc-4572-b6e5-83c1bf0fed81",
        "name": "ddce0219923d152b8facd303f058a6286cf1f6924992b9fb9f5bf4d96436cc39"
      },
      {
        "id": "5976199b-ac3b-4dd6-824b-0a216cc03c8c",
        "name": "c99139b0053c4c698ea0246d26d747f2a984c7aba4613da818ecd9f97899ef3a"
      },
      {
        "id": "c0917a42-4960-4906-8dbd-254dce483d77",
        "name": "512ede9f2fa794907999f3c26165557fdfd383b7aad71ba022ce2c8ba6c0019d"
      },
      {
        "id": "6333feff-97d2-402c-80a0-422d3acb0928",
        "name": "191.96.78.172"
      },
      {
        "id": "02cbc7f9-232e-43f5-b9ae-9a48e8eb9042",
        "name": "191.101.131.250"
      },
      {
        "id": "6067869b-0b34-4f05-8156-237de5b4e7b9",
        "name": "a764d73795abe47ae640ba09999a18c47b5340e5ecc7b897afebf34f3f37638f"
      },
      {
        "id": "01111008-78e9-42a5-82f9-74b854c95584",
        "name": "752c1cfe783ed343e470ab95a4843a23872cdc98b7d3ed5633dd6c881c071a14"
      },
      {
        "id": "847882b5-ee95-4e84-85d1-f63e937ee8c8",
        "name": "6f9832ebb4c3054bee4a6ce5ccb69c00e2020053e1308353343097e6a4041109"
      },
      {
        "id": "05e22ec8-87a3-43b9-86df-e9d43623bc9a",
        "name": "97a0497de585d3be6ec75064ab3bd0979cd85561193c1f0669ccf4db31330687"
      }
    ],
    "malware": [
      {
        "id": "d290cbdb-c914-49ce-96d2-2a43c0eb4e54",
        "name": "SpySolr",
        "slug": "spysolr"
      },
      {
        "id": "551db3de-3c3e-48f3-a869-1aa2af360cb2",
        "name": "BTMOB",
        "slug": "btmob"
      }
    ],
    "observables": [
      {
        "id": "4ec4ece5-4f2a-43cc-b328-3995df43acef",
        "name": "arbsniper.com"
      },
      {
        "id": "ec6fb4f8-a6fc-427d-9a66-2686787b9815",
        "name": "191.96.79.179"
      },
      {
        "id": "78c84b60-29a7-4604-bc36-c6fdc617fb4f",
        "name": "200.9.155.153"
      },
      {
        "id": "4ea359c5-a7aa-412c-a253-6c85089c62e2",
        "name": "191.101.131.250"
      },
      {
        "id": "b8baec26-3e8f-4d3e-9c6c-7fd62810aad2",
        "name": "191.96.78.28"
      },
      {
        "id": "ec6ba831-d3eb-4b25-8a3d-39303b0158aa",
        "name": "191.96.225.241"
      },
      {
        "id": "872465f8-772d-4bcc-8c0c-f10424c714d9",
        "name": "191.96.79.41"
      },
      {
        "id": "26643b0f-5bb7-4006-8c9b-8edbcd48ed2e",
        "name": "195.160.221.203"
      },
      {
        "id": "0cff28ba-f199-480a-819d-8b750309f599",
        "name": "191.96.79.133"
      },
      {
        "id": "95971304-0d86-4b9b-8af9-e624d6570ed1",
        "name": "191.96.224.87"
      },
      {
        "id": "e93a43f9-c34f-4610-8cc8-a4ff52b0d30e",
        "name": "191.96.78.172"
      },
      {
        "id": "",
        "name": "c6199e175fb988cbbeacdf0f5acdf9ed83f5bdaae5c95b7a6c27ee72cd11b0b1"
      },
      {
        "id": "",
        "name": "aa56f350882ce63429c6626567487b041f06168bb60f4fc371a262eabadfa660"
      },
      {
        "id": "",
        "name": "0628ad6d1fd836b13b22e75fa169502d8ce78b7ad20f0261eb5151da98437bca"
      },
      {
        "id": "",
        "name": "a892f1ef2e530d67bf948a48c734da3f27718eb8b883ca0b686ddb0a81071731"
      },
      {
        "id": "",
        "name": "6ae94ce710016d86ed7457236deef2c4c51478587f3609b6e827a348828b3931"
      },
      {
        "id": "",
        "name": "7ac974899e8e05aaacd417577c97e382d5e8c5f7f4a85632cffb47ec2f6ae4e0"
      },
      {
        "id": "",
        "name": "a1e457c52eab430c20d48f2ac476e080386313f16efb135a0471902cf68ce475"
      },
      {
        "id": "",
        "name": "1a60cb5f7e2fb7c09fc3dc8459108b26ac98ee73131f37a28cfdad5fc75b7a7d"
      },
      {
        "id": "",
        "name": "2525d1e427a9983b0b4ca0906a4b44ffb9814b23d53fd8a2e3ab6512b027c733"
      },
      {
        "id": "",
        "name": "5a4e86bbcf0ebc455d2995db225d9ad682e9b37b6bad472a604a462099d988bd"
      },
      {
        "id": "",
        "name": "702261ba38b57ecc3a5407fed28b2f0611a74c2ec0c116aea4f9e6def0899aed"
      },
      {
        "id": "",
        "name": "676cb2d0a60403afc06cea1b572cb7261f706365fac65621b5a4907893e7ac0d"
      },
      {
        "id": "",
        "name": "998a7ed1572ad9dc11375bc25294e1954e606b7cff9fabc5c120713e597cd274"
      },
      {
        "id": "",
        "name": "6101d1e1811db052f869f7eb3402dad28da7e92103d4a44ee43f95846a075012"
      },
      {
        "id": "",
        "name": "58ac130a8ebb09e37592ac69841483edc5695d1545b1f04f23d5b760ac17cd94"
      },
      {
        "id": "",
        "name": "0a542751724a432a8448324613e0ce10393e41739a1800cbb7d5a2c648fcdc35"
      },
      {
        "id": "",
        "name": "8f09274e808e0063d51f34cac82a5770b3df30c792e426da2f6a80657f27affc"
      },
      {
        "id": "",
        "name": "140a7f995b0336942691a2e93e2017fd575267c017c7d0728d69169306f91963"
      },
      {
        "id": "",
        "name": "6844ce1539014571360495c6fb50965e813c2721663bdd40d577d9e5163773c6"
      },
      {
        "id": "",
        "name": "5aaaf972c8bf39a98f2748e526de3cc0370ba831997d7d9765cdaba599645c0d"
      },
      {
        "id": "",
        "name": "e5a9fdff900dd502e8f3dce52d2d1b69aa9afafb5094a28f9037e8770db0e63b"
      },
      {
        "id": "",
        "name": "244d81fd9908cd17815501d4edadeb1baf1c421aa25d8bd61c7cb481c939540e"
      },
      {
        "id": "",
        "name": "26a2268281e8043125ef72b92f8980b42912048753d56894bc378fb54c7c188a"
      },
      {
        "id": "",
        "name": "6bba64fa9e8a7b11cb2476cd071de08986db44b0783eff211c68fa5594ef8143"
      },
      {
        "id": "",
        "name": "75dd4fb011ed598374a46fc0d9c0d1d64a298341c34afc83a56a6983cfd27764"
      },
      {
        "id": "",
        "name": "168f50bf9a87099094ef410e3ac33e676a6a8740a5437cd09e7b63d73df8431a"
      },
      {
        "id": "",
        "name": "d55057cd9110d12a192281356f06b94f342b9febb305cf0a5898a7e6af40758f"
      },
      {
        "id": "",
        "name": "02a52c4cc11748d44c9b49d508ee4e46425661981fa1406f30ec0830cb69ddc5"
      },
      {
        "id": "",
        "name": "f76b13040c634f82a8332ff9443d84c89a5bced51ae9adad7fd15c05fadb4324"
      },
      {
        "id": "",
        "name": "ddce0219923d152b8facd303f058a6286cf1f6924992b9fb9f5bf4d96436cc39"
      },
      {
        "id": "",
        "name": "c99139b0053c4c698ea0246d26d747f2a984c7aba4613da818ecd9f97899ef3a"
      },
      {
        "id": "",
        "name": "512ede9f2fa794907999f3c26165557fdfd383b7aad71ba022ce2c8ba6c0019d"
      },
      {
        "id": "",
        "name": "a764d73795abe47ae640ba09999a18c47b5340e5ecc7b897afebf34f3f37638f"
      },
      {
        "id": "",
        "name": "752c1cfe783ed343e470ab95a4843a23872cdc98b7d3ed5633dd6c881c071a14"
      },
      {
        "id": "",
        "name": "6f9832ebb4c3054bee4a6ce5ccb69c00e2020053e1308353343097e6a4041109"
      },
      {
        "id": "",
        "name": "97a0497de585d3be6ec75064ab3bd0979cd85561193c1f0669ccf4db31330687"
      }
    ],
    "others": [
      {
        "id": "",
        "name": "Brazil"
      },
      {
        "id": "",
        "name": "Argentina"
      },
      {
        "id": "",
        "name": "arbsniper.com"
      }
    ]
  },
  "external_refs": [
    {
      "id": "55b099b8-eea7-4f52-b897-db7ed94419ad",
      "standard_id": "external-reference--de26ce48-efeb-513f-9548-edaa925b263d",
      "entity_type": "External-Reference",
      "source_name": "AlienVault",
      "description": null,
      "url": "https://www.welivesecurity.com/en/malware/btmob-stealthy-rat-burrowing-deep-android-devices/",
      "hash": null,
      "external_id": null,
      "created": "2026-06-01T08:50:58.899Z",
      "modified": "2026-06-01T08:50:58.899Z",
      "createdById": null
    },
    {
      "id": "a1d3cc23-b7c8-4e2b-882c-9f99af27f901",
      "standard_id": "external-reference--f06b47b3-8807-5bce-9fe3-f03ff8de805d",
      "entity_type": "External-Reference",
      "source_name": "AlienVault",
      "description": null,
      "url": "https://otx.alienvault.com/pulse/6a1cc51d7c8f832f819a0a43",
      "hash": null,
      "external_id": "6a1cc51d7c8f832f819a0a43",
      "created": "2026-06-01T08:50:58.868Z",
      "modified": "2026-06-01T08:50:58.868Z",
      "createdById": null
    }
  ]
}