Koktevrat – a multi-stage Android RAT distributed under the guise of the MandatGO app

2026-09-09 (Back to Inventory)

Koktevrat – a multi-stage Android RAT distributed under the guise of the MandatGO app

Author(s): Ireneusz Tarnowski, Olaf Grzybowski
Organization: Orange CERT

Open article directly

2026-07-20 ⋅ Medium Ireneusz Tarnowski ⋅ Ireneusz Tarnowski
INC Ransom: Infrastructure Analysis, Operational Tradecraft, and Detection Opportunities
INC INC

2026-06-17 ⋅ Orange CERT ⋅ Orange Cyberdefense
EmEditor Supply Chain Attack
Runster

2026-05-03 ⋅ Medium Ireneusz Tarnowski ⋅ Ireneusz Tarnowski
Multi-stage malware delivery campaign using SEO poisoning and serverless infrastructure
AMOS

Propose Change Koktevrat – a multi-stage Android RAT distributed under the guise of the MandatGO app

Related Articles

Koktevrat – a multi-stage Android RAT distributed under the guise of the MandatGO app