Malware
ArsinkRAT
- First Reported
- Feb 25, 2026
- Latest Reported
- Feb 28, 2026
Reported Context (2)
- The malware-as-a-service Android RAT SURXRAT V5, derived from ArsinkRAT, has been linked to Indonesian threat actors. By abusing gaming apps and Android Accessibility Services, it enables OTP interception, financial Indonesia Faces a Broad Mix of Cyber Threats in 2026
- Code links to ArsinkRAT and more than 180 identified samples show rapid evolution, and unusual features—like the conditional download of a >23GB LLM from Hugging Face triggered by Free Fire titles—signal AI Analysis Links SURXRAT Android RAT to ArsinkRAT and Finds Conditional LLM Download
CVE (1)
Malware (4)
Threat Actors (8)
MITRE ATT&CK (16)
Vendors (2)
Products (16)
Tools (1)
Industries (8)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.