Avast researchers have published an analysis of the Omnirat RAT , a cross-platform remote administration tool used by cybercriminals in the wild. The researchers created a brief analysis of the OmniRAT , which is being used for malicious purposes.
An interesting analysis of the multi-platform remote administration tool OmniRAT has been published by Avast researchers . The RAT in question runs on Android , Windows , Linux X. , and MacOS It is very popular and very cheap, with a retail price of $50 and a special discount of $25 for customers. The developers also offer lifetime support.
Although OmniRAT is not designed for illegal purposes, Avast experts have observed that it is widely used by scammers as a remote access Trojan.
Attackers often distribute RATs through social engineering, a German user explains that his Android was infected by an SMS containing a short URL that led to a website where the victim had to enter a code and their phone number. The SMS claimed that the victim had received an MMS that could not have been sent to them because their device was infected with an Android StageFright.
When the victim provides the requested information, an icon named “MMS Retrieve” appears and once clicked, it begins the installation of the OmniRAT.
Avast analyst Nikolaos Chrysaidos explains that once criminals infect the phone, they can gain access to the contact list in order to spread Omnirat .
OmniRat is related to another RAT, DroidJack . Which was used in illegal activities by various organizations. OmniRat is of course cheaper than DroidJack , which sells for around $210.
