Over the last six months Iranian hackers showed a clear interest in using various types of remote access trojans (RATs) aimed at Android systems, according to researchers at Recorded Future.
They noted an increase in online chatter among certain threat groups concerning the preference of DroidJack and AndroRAT over njRAT, DarkComet and XtremeRAT which have consistently been popular choices among the threat actors in the region.
The two RATs may be gaining popularity because of their open access to download or purchase, strong community support to help install the malware, and its ease of use. The interest in AndroRat could also be attributed to its GitHub repositories, the report said.
Researchers said that 80 percent of mobile devices in the Middle East are Androids making Android RATs a popular choice for threat actors in the region.