Check Point Research Identifies Rafel RAT Android Malware Targeting Military Sector, Espionage, and Ransomware

Check Point Research has identified Rafel RAT, an open-source Android malware, being leveraged by various threat actors globally. This malware targets the military sector, intercepts two-factor authentication (2FA) messages, and conducts ransomware and espionage operations. Cyber espionage groups are using Rafel RAT disguised as popular apps like Instagram and WhatsApp to conduct data theft and device manipulation. Users are urged to update their Android devices to protect against this threat. Check Point Research also identified multiple Android malware using Rafel RAT.