Fantasy Hub: Another Russian Based RAT as M-a-a-S

Fantasy Hub is an actively marketed Android Remote Access Trojan offered as a Malware-as-a-Service that enables broad device takeover and espionage: it uses counterfeit Google Play pages for distribution, a native dropper that decrypts payloads at runtime, abuse of the SMS handler to intercept 2FA and messages, WebRTC for live audio/video streaming, and customizable phishing overlays to steal banking credentials; the seller provides builders, Telegram-based subscription and notification tooling, and instructions that lower the barrier to novice attackers.