[kevin2121]

I need RAT for Android Phone. Also need binder to compile with other apk.

[nevalackin]

i think theres a rat called crazy rat or something

[separatista]

AndroSpy, Android Tester 6.4.6 should get you started and used to Android RATs and their functionality. It's important to learn the strict differences between windows and Android. Including a firm understanding of Last in, first Out (LIFO) work process.

However, keep in mind, most free and even paid RATs don't include a working remote desktop/"VNC" like functions and house very limited functionality. Infact, alot of applications cannot be viewed over TLS because of the nature of "VNC". Some overlay permissions strip the rights of android OS sub user to overlay permission on applications, thus preventing screenshots. Software that can somewhat overcome these restrictions are known as Android/iOS Banking Trojans, under the strain name "Botnet"/"Loader" and not referred to as a RAT.

Most working VNC-like modules for mobile devices are based on rapid screenshot interval, which take screenshots of the device on timed interval, action intervals and send them back to the C2(C&C center) for review by the operator of the malware. Couple this with a mapped TouchID injection (graph mapping "touch" areas of the device by (x , y)) can make for a devastating trojan.

Some examples of commercial Android Banking Trojans are Octo, Hook/ERMAC-2, AlienBot, JokerrBot(subscribeware banking trojan).
Each botnet has its' own strengths and weaknesses.



EDIT:
The Shitlist of RATs are as follows: Spynote, CraxsRAT, BrataRAT, CypherRAT, PekkaRAT and any other RAT that looks like it was made in AutoIT x MSPaint.
Please do not purchase without a thorough test of the product.

Hook being sold for 7k x month...I wonder how do you even affect the victims? It's not like a jpeg file that you can easily share it with

[separatista]

jpeg exploits do not exist. These are well crafted scams reliant on OLD exploits that are long patched.
a jpeg exploit in modern day that could be independently sent regardless of software would be worth millions and utilized by state actors for political agendas.

Hooks output is an .apk, just like Octo and Alien.

The best method of spreading at the current time without exploits that drop and install the .apk would be to host a legitimate application on the google play store with an aged cert/account, and have the application fetch an automatic "update" from an update server hosted by you.
Hardcode the .apk once permissions are granted on the initial app disguised as an update.

When the app is launched, it will fetch an automatic update, installing your app.


There are other methods of installation, too. Though it has gotten more difficult since Android11, they are still available but fetch a higher price tag like the Samsung phishing page installable via spoofed notification bar triggered by sms here;

Spoiler (Click to View)









Which will feed and install your malicious .apk disguised as a security update for Samsung Mobile devices. The same exists for LG, Google and most other popular vendors.



So, in short, spreading for mobile devices is not cheap, and often requires a high degree of social engineering to target the victim to install the actual application if you aren't willing to shell out capital funds for an adequate delivery method.

40k....That's insane. I assume it's to be used only to RAT those guys who have huge crypto portfolios then.

[Jasoncash33]

I’ve played around with the “shit rats” CraxsRAT, BrataRAT, and CypherRAT for testing purposes. But main thing is. You have to make sure you get a clean version of it and not one with back door. Etc.

[Jasoncash33]

A backdoor doesn't effect their performance and capabilities.
Tell EVLF I said "Hi, no matter how many times you put on a different mask; it won't hide the bad development".

True true. Just out of habit, saying that I guess. Since new comers are quick to download anything and everything claiming to do everything automatically etc. And thats funny 😂. Too bad I’m not in that group. Was just one of the “cracked” RATs I tried out to play around with.

[Donrulezz]

well mostly android rat which are cracked are backdoored but i have good solution for it.. if you still want to use cracked one make sure to buy a rdp first a bullet proof rdp ofcourse located in ukraine in my case. than play with the shitty cracked tools its safe for you than. :p

[xijinping123]

Dyne is really a great person, respected and admired

[Raphaelkruk]

spymax 2.0 and android tester 4.6.5 these are the only clean free android rat u can find in the internet

[3xPLT3R]

A backdoor doesn't effect their performance and capabilities.
Tell EVLF I said "Hi, no matter how many times you put on a different mask; it won't hide the bad development".

EVLF product (CraxsRat 6.7) is working fine for me. Though there is a new version.
OP can try that Or buy the new version out there.

[SupG]

Love all the informative info Dyne

[vancy]

hook rat is a good one , it works very good

[7BugBey7]

hook rat is a good one , it works very good

Where do you find it? Is the C2 server online or do the "hacker" hosts it?