Table of Contents

888 RAT: A Dangerous Malware for Android Devices

888 RAT is a remote access trojan (RAT) that targets Android operating systems. It can allow hackers to take full control of the infected device and steal sensitive data, spy on the user’s activity, and perform malicious actions. 888 RAT is also known as LodaRAT and Gaza007.

888 RAT was first sold as a Windows malware, but later it was developed for Android and Linux platforms. In 2019, a variant of the Android 888 RAT became available for free. This malware has been associated with two cybercriminal groups: Kasablanka and BladeHawk. The latter group used 888 RAT to launch a cyber-espionage campaign against the Kurdish ethnic group and its supporters.

888 RAT can be spread through malicious links or downloads, disguised as legitimate apps or documents. Once installed, it can collect various information about the device, such as hardware and OS details, camera specs, IP address, installed apps, enabled permissions, etc. It can also execute shell commands and scripts.

Some of the harmful features of 888 RAT are:

• Managing phone calls and text messages: It can access contact lists and call logs, make and record phone calls, intercept and send SMSes to specific numbers.
• Taking screenshots and photos: It can capture the screen of the device and take pictures using the camera(s).
• Getting passwords: It can steal passwords from various browsers and email clients, such as Firefox, Internet Explorer, Google Chrome, Opera, Safari, Outlook, Thunderbird, etc.
• Phishing Facebook credentials: It can display a fake Facebook sign-in window to trick the user into entering their username and password.
• Opening malicious URLs: It can force-open specific websites on the default browser, which could be used to promote phishing or malware-spreading sites.
• Playing ringtone: It can play the phone’s ringtone for six-second intervals.
• Mining cryptocurrency: It can run scripts that could perform Bitcoin mining activities on the device.

888 RAT is a very dangerous malware that can compromise the security and privacy of the user. It can also cause performance issues and high battery consumption on the device. Therefore, it is highly recommended to remove 888 RAT as soon as possible.

How do I remove 888 RAT from my device?

If you suspect that your device is infected with 888 RAT, you should take the following steps to remove it:

1. Disconnect your device from the internet and any other networks to prevent the malware from communicating with its server or spreading to other devices.
2. Scan your device with a reputable anti-malware program that can detect and remove 888 RAT. You can use SpyHunter 5 or another trusted tool. Make sure to update the anti-malware program before running the scan.
3. Delete any suspicious apps or files that you have downloaded recently or that you don’t recognize. You can check the app permissions and usage statistics to see if any app is behaving abnormally.
4. Change your passwords for all your online accounts, especially Facebook, email, and banking. Use strong and unique passwords for each account and enable two-factor authentication if possible.
5. Restore your device to its factory settings if the malware persists or if you want to be extra cautious. This will erase all your data and settings, so make sure to back up your important files before doing this.

How do I protect my device from 888 RAT?

To prevent 888 RAT or other malware from infecting your device, you should follow these best practices:

• Avoid clicking on unknown or suspicious links or attachments in emails, messages, or social media posts. They could be used to deliver malware or redirect you to phishing sites.
• Download apps only from official and trusted sources, such as Google Play Store or Apple App Store. Check the app ratings, reviews, and permissions before installing them.
• Keep your device and apps updated with the latest security patches and bug fixes. They could fix vulnerabilities that malware could exploit.
• Use a reliable anti-malware program and firewall on your device and scan it regularly for any threats. You can also use a VPN service to encrypt your internet traffic and hide your IP address.
• Be careful when using public Wi-Fi networks or charging stations. They could be used to intercept your data or inject malware into your device.