Rapid Response: Zimperium’s Zero-Day Coverage of GhostBat RAT Campaign

GhostBat RAT is an Android malware campaign targeting Indian users by impersonating Regional Transport Office (RTO) apps and luring victims via WhatsApp/SMS phishing and hosted APK links; once installed it uses fake update prompts, overlays, native libraries and multi-stage droppers to harvest banking credentials, SMS and device identifiers while evading detection. The report notes Zimperium detected related IOCs on-device (including a zero-day catch), highlighting the need for on-device mobile threat defenses.