PJobRAT Malware Targets Users in Taiwan via Fake Apps

Researchers uncovered a long-running cyber-espionage campaign distributing PJobRAT — an Android RAT disguised as chat apps hosted on compromised WordPress sites — that exfiltrates SMS, contacts and media, executes shell commands (enabling rooting and lateral actions), records audio, and communicates via Firebase Cloud Messaging and HTTP C2; activity spanned at least Jan 2023 to Oct 2024 and targeted users in Taiwan (previously seen against Indian military).