SYMBOLCOMMON_NAMEaka. SYNONYMS
apk.brata (Back to overview)

BRATA

aka: AmexTroll

According to Cleafy, the victim's Android device is factory reset after the attackers siphon money from the victim's bank account. This distracts users from the crime, while removing traces or footprints that might be of interest to forensic analysts.

References
2022-08-04ThreatFabricThreatFabric
@online{threatfabric:20220804:brata:50094d5, author = {ThreatFabric}, title = {{Brata - a tale of three families}}, date = {2022-08-04}, organization = {ThreatFabric}, url = {https://www.threatfabric.com/blogs/brata-a-tale-of-three-families.html}, language = {English}, urldate = {2022-09-13} } Brata - a tale of three families
BRATA
2022-06-17CleafyFrancesco Iubatti, Alessandro Strino
@online{iubatti:20220617:brata:5b4cc52, author = {Francesco Iubatti and Alessandro Strino}, title = {{BRATA is evolving into an Advanced Persistent Threat}}, date = {2022-06-17}, organization = {Cleafy}, url = {https://www.cleafy.com/cleafy-labs/brata-is-evolving-into-an-advanced-persistent-threat}, language = {English}, urldate = {2022-06-22} } BRATA is evolving into an Advanced Persistent Threat
BRATA
2022-01-24CleafyCleafy
@online{cleafy:20220124:how:b4fcbab, author = {Cleafy}, title = {{How BRATA is monitoring your bank account}}, date = {2022-01-24}, organization = {Cleafy}, url = {https://www.cleafy.com/cleafy-labs/how-brata-is-monitoring-your-bank-account}, language = {English}, urldate = {2022-01-25} } How BRATA is monitoring your bank account
BRATA
2021-12-03CleafyCleafy
@online{cleafy:20211203:mobile:4153ff9, author = {Cleafy}, title = {{Mobile banking fraud: BRATA strikes again}}, date = {2021-12-03}, organization = {Cleafy}, url = {https://www.cleafy.com/cleafy-labs/mobile-banking-fraud-brata-strikes-again}, language = {English}, urldate = {2021-12-13} } Mobile banking fraud: BRATA strikes again
BRATA
2021-02-22AdvIntelBeatriz Pimenta Klein
@online{klein:20210222:economic:904a7ed, author = {Beatriz Pimenta Klein}, title = {{Economic Growth, Digital Inclusion, & Specialized Crime: Financial Cyber Fraud in LATAM}}, date = {2021-02-22}, organization = {AdvIntel}, url = {https://www.advintel.io/post/economic-growth-digital-inclusion-specialized-crime-financial-cyber-fraud-in-latam}, language = {English}, urldate = {2022-02-16} } Economic Growth, Digital Inclusion, & Specialized Crime: Financial Cyber Fraud in LATAM
BRATA Mekotio Metamorfo Ploutus ATM VictoryGate
2019-08-29Kaspersky LabsGReAT
@online{great:20190829:fully:a86ed11, author = {GReAT}, title = {{Fully equipped Spying Android RAT from Brazil: BRATA}}, date = {2019-08-29}, organization = {Kaspersky Labs}, url = {https://securelist.com/spying-android-rat-from-brazil-brata/92775/}, language = {English}, urldate = {2019-12-20} } Fully equipped Spying Android RAT from Brazil: BRATA
BRATA

There is no Yara-Signature yet.