Sophisticated Surveillance RAT Marketed for Global Buyers

'Cyber Android RAT' Can Capture WhatsApp History, Crypto Seed Phrases Greg Sirico • March 12, 2026

Cybercriminals are advertising on criminal hacking online boards an Android remote access Trojan that can steal victims' WhatsApp conversation history, surveil them in real time and extract cryptocurrency seed phrases for the low price of about $500 a month.

See Also: Why HSMs Are Critical to Digital Asset Security

The seller behind the "Cyber Android RAT" markets it "as 'the most advanced Android RAT in the market, coded from scratch by a professional team,'" reports mobile security firm Certo.

Supported by a command-and-control platform dubbed "Cyber Nebula Core," the RAT includes comprehensive passive and active surveillance such as live microphone streaming and real-time video from cameras on both sides of a device. Access to it can be held for $499 a month or $2,500 for lifetime access. "The RAT is positioned ...