News Summary

• StreamRat was promoted to Spanish-speaking users through a fake television-streaming campaign on Meta.
• Device takeover requires the victim to grant a succession of controls after sideloading the Android Package.
• Once Accessibility access is enabled, operators can capture keystrokes, display credential-stealing overlays, inspect the visible interface, and control the device remotely.
• "There is little doubt that StreamRat is a new and technically sophisticated threat, developed by individuals with prior experience in the Android malware ecosystem," ThreatFabric said in its StreamRat analysis.