En bref
A malvertising campaign reaching roughly 570,000 Meta users promoted a fake free TV streaming service to push the StreamRat Android banking trojan. Ads ran on Instagram, Facebook, and TikTok, primarily targeting Spanish speaking users in...
Comment ca fonctionne
A malvertising campaign reaching roughly 570,000 Meta users promoted a fake free TV streaming service to push the StreamRat Android banking trojan. Ads ran on Instagram, Facebook, and TikTok, primarily targeting Spanish speaking users in...
Signaux d'alerte
- Streaming ads on social feeds that require installing an app outside Google Play. The site asks you to enable "installations from unknown sources" or change browser settings before downloading. A freshly installed app requests Accessibility, Device Admin, or default launcher permissions unrelated to streaming
Que faire
- 1Install streaming and banking apps only from Google Play, verifying developer name, reviews, and history. Never enable sideloading or "unknown sources" based on instructions from an ad, DM, or unfamiliar website. If you installed the app, disconnect from Wi Fi/data, revoke its permissions, uninstall it, change banking pas
Source
malwarebytes
Source verifiee par Mythos Forensic Team
https://www.malwarebytes.com/blog/news/2026/09/streamrat-android-malware-spreads-through-meta-and-tiktok-adsFAQ
StreamRat malware spreads via Meta and TikTok ads posing as free TV streaming est une vraie arnaque ?
Oui. Traitez le message, l'appel ou la demande de paiement comme suspect jusqu'a verification via un canal officiel.
Quels sont les premiers signaux ?
Streaming ads on social feeds that require installing an app outside Google Play. The site asks you to enable "installations from unknown sources" or change browser settings before downloading. A freshly installed app requests Accessibility, Device Admin, or default launcher permissions unrelated to streaming
Que faire en premier ?
Install streaming and banking apps only from Google Play, verifying developer name, reviews, and history. Never enable sideloading or "unknown sources" based on instructions from an ad, DM, or unfamiliar website. If you installed the app, disconnect from Wi Fi/data, revoke its permissions, uninstall it, change banking pas
LegalAudit peut-il verifier mon cas ?
Oui. Lancez le chat gratuit et collez le message, le lien, l'expediteur ou les details de paiement.