StreamRat Android malware spreads through Meta and TikTok ads
Malwarebytes reports StreamRat Android banking trojan spread via Meta and TikTok ads reaching roughly 570,000 users, mostly in Spain.
Malwarebytes researchers uncovered a malicious advertising campaign on Meta and TikTok promoting a fake free TV-streaming service that delivered the StreamRat Android banking trojan and infostealer. The ads, aimed at Spanish-speaking users with most victims in Spain, reached approximately 570,000 Meta users in a campaign running June 11 through July 3, 2026. The download site detected Android devices and the referral source, then coached users through sideloading steps including enabling installs from unknown sources. StreamRat can monitor the screen, capture typed credentials, display fake login screens, and give attackers remote control, including black-screen and fake Android update overlays.
- StreamRat is an Android banking trojan and infostealer distributed through paid Meta and TikTok ads.
- Ads reached roughly 570,000 Meta users; campaign ran June 11 to July 3, 2026.
- Targets Spanish-speaking users, with most observed victims located in Spain.
- Malware monitors screens, captures input, shows fake login/update screens, and enables remote device control.
- Distribution site tailored instructions by device type and referral source to coach users through sideloading.
From the original article
3 min read at malwarebytes.com
Social media ads for a free streaming service exposed roughly 570,000 people to StreamRat, a banking Trojan that can take control of infected phones.
By @MetallicaMVP · malwarebytes.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.