Gigabud RAT: Android Malware Posing As Govt Agencies

**Executive summary:** Cyble Research & Intelligence Labs analyzed an Android Remote Access Trojan tracked as "Gigabud" that spreads via phishing sites impersonating airlines, banks, and government agencies in Thailand, the Philippines, and Peru; the RAT abuses Android Accessibility and screen recording to capture credentials and sensitive information, communicates with multiple C2 servers, and has numerous identified samples and IOCs including hashes and URLs.