New StreamRAT Android Trojan Gives Hackers Full Remote Control Through VNC and Accessibility

StreamRAT is an Android banking trojan distributed via streaming-themed social-media advertisements targeting Spanish-speaking users; it uses a multi-stage installer outside official app stores, leverages Accessibility and VNC/hidden screenshots to observe and remotely control devices, deploys credential-stealing overlays and evasion techniques (broken VPN, default-home persistence), and the report includes IoCs (SHA-256 hashes, package names, C2 IPs) plus detection and mitigation recommendations.