MITRE ATT&CK Technique
T1406.002
- First Reported
- Oct 15, 2026
- Latest Reported
- Oct 15, 2026
Reported Context (1)
- GhostBat RAT conceals payloads with encrypted and packed loaders, including AES-CBC, XOR, SPKZ/SPK1, encrypted DEX stages, and the multi-stage libnetbridge.so loader. GhostBat RAT Uses Android Accessibility Overlays to Steal PINs
Malware (1)
MITRE ATT&CK (14)
Products (6)
Industries (2)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.