Malware
BTMOB
- First Reported
- Aug 14, 2025
- Latest Reported
- Oct 6, 2026
Reported Context (4)
- BTMOB RAT represents a shift in how mobile malware is distributed and used. Rather than being deployed by a single threat actor, it operates as a fully commercialized malware-as-a-service platform, essentially a Commercial Spyware: How It Infects Mobile Devices and What It Can Expose
- 🇮🇳 India – BTMOB IPTV-Themed Ads Spread Mobile Malware in Four Countries
- BTMOB actually corrupts itself to bypass inspection. Why Fraud Controls Miss Mobile Malware on Trusted Devices
- Besides PhantomCard, "Go1ano developer" also claims to be the "trusted partner" of BTMOB, GhostSpy spyware families in Brazil. PhantomCard Android Trojan Relays Brazilian Users’ Bank Card Data Over NFC
Malware (19)
Threat Actors (1)
MITRE ATT&CK (3)
Vendors (3)
Products (10)
Tools (3)
Industries (1)
Countries (6)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.