Introducing MERENA+ — our premium tier with your personalized safety dashboard, risk score, and all security tools. Sign up and cancel risk free in the first 14 days.Learn More
MERENA
Advisory Alert

A Leaked Android RAT Is Powering 170 Servers and Its Successor Is Already Online

A widely shared phone-hijacking tool is being used by criminal groups to build fake Android apps that can secretly take over phones and steal personal information. It has already been linked to a large number of active systems, and a newer version is already appearing online.


Who is at risk

Android phone users who install apps from links, messages, third-party websites, or apps pretending to be government or public service tools are most at risk.

What to watch for

Watch for unexpected app installs, fake government-themed apps, unusual permission requests, pop-ups, battery drain, strange text messages, or signs that your phone is acting on its own.

What to do

Only install apps from the official Google Play Store, remove any suspicious apps immediately, review app permissions, and run a trusted mobile security scan if you think your phone may be affected.