Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Fantasy Hub is a newly identified Android Remote Access Trojan (RAT) offered as Malware-as-a-Service (MaaS) on Russian-language platforms. It provides extensive espionage capabilities including SMS exfiltration, contact and call log theft, and bulk media extraction. The malware can intercept, reply to, and delete incoming notifications, and uses fake Google Play pages to evade detection. It specifically targets financial institutions by deploying fake windows to steal banking credentials. The MaaS model includes comprehensive documentation and a bot-driven subscription system, lowering the barrier for novice attackers. Although no known exploits in the wild have been reported yet, the threat poses a medium severity risk due to its broad capabilities and ease of use. European organizations, especially financial institutions, are at risk due to the malware’s targeting profile and Android’s widespread use. Mitigation requires targeted detection of fake app pages, enhanced mobile security hygiene, and user awareness focused on banking credential phishing. Countries with large financial sectors and high Android adoption, such as Germany, France, and the UK, are most likely to be affected.

Fantasy Hub is an Android-based Remote Access Trojan (RAT) distributed via a Malware-as-a-Service (MaaS) subscription model on Russian-language channels. This RAT provides attackers with extensive control over infected devices, including the ability to exfiltrate SMS messages, steal contacts and call logs, and bulk download images and videos. It also intercepts, replies to, and deletes incoming notifications, which can be used to manipulate victim communications stealthily. The malware employs social engineering tactics by creating fake Google Play Store pages to trick users into installing the RAT, thereby evading traditional detection mechanisms. A key focus of Fantasy Hub is targeting financial institutions by deploying fake windows designed to capture banking credentials, enabling financial fraud. The MaaS offering includes detailed seller documentation, instructional videos, and a bot-driven subscription system, making the malware accessible even to attackers with limited technical skills. Although no confirmed exploits in the wild have been documented, the combination of advanced espionage features and ease of deployment presents a significant threat. The RAT’s capabilities allow attackers to compromise confidentiality, integrity, and availability of user data on Android devices, particularly those used for sensitive financial transactions.

Detailed information about Fantasy Hub: Another Russian Based RAT as Malware-as-a-Service. Get real-time updates, technical details, and mitigation strategies.

Fantasy Hub: Another Russian Based RAT as Malware-as-a-Service - Live Threat Intelligence - Threat Radar | OffSeq.com

Fantasy Hub: Another Russian Based RAT as Malware-as-a-Service

Threats Tagged 'fantasy hub'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'fantasy hub'

Lead Pen Test Professional