DroidBot
- Malware type
- rat, keylogger, spyware
- Family
- Malware family
- Profile updated
- 2026-07-07 14:05:51
Targeted industries: financial-services retail-and-hospitality
Context
According to Cleafy, DroidBot is a modern RAT that combines hidden VNC and overlay attack techniques with spyware-like capabilities, such as keylogging and user interface monitoring. Moreover, it leverages dual-channel communication, transmitting outbound data through MQTT and receiving inbound commands via HTTPS, providing enhanced operation flexibility and resilience.
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Apk.Droidbot (report)
- cleafy.com — Droidbot Insights From A New Turkish Maas Fraud Operation (report)