IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure
TLP:WHITE2 IOCs

RATHat Android Banking Trojan Uses Gemini AI and ADB Shell to Take Control of Devices

CP
Cyber Press
Published October 2, 2026Original Report

Threat Actors

Malware Families

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYBlackCatINFRASTRUCTUREadmin.chunhuating.bestadmin.xiongmaocs.picsCAPABILITYBlackCatFrpVICTIMunknown
Adversary(1)
Infrastructure(2)
Capability(2)
Victim

Indicators of Compromise

Indicators of Compromise2

TypeIndicatorConfidenceScoreFirst Seen
Domainadmin.chunhuating.best
c2intel-blogmalware
High
58
Oct 2, 26
Domainadmin.xiongmaocs.pics
c2intel-blogmalware
High
58
Oct 2, 26

IOC Relationship Graph

IOC Relationship Graph2 total IOCs
Domain
Domain2Actors1Malware2REPORTRATHat Android Banking TroBlackCatBlackCatFrp
scroll to zoom · drag to pan · click IOC to open