Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
1 IOC
StreamRAT Android Malware Abuses Accessibility and VNC to Take Full Control of Devices
Malware Families
Excerpt
One campaign, called “Steamtv Esp,” potentially reached around 570,000 Meta users between June 11 and July 3, 2026, with Spain appearing to be the main target. The campaign uses TV-streaming lures similar to earlier IPTV-themed malware campaigns. Victims who click an ad are taken to a phishing website that checks whether they are using Android. Non-Android visitors cannot access the download button. Android users are guided through steps to allow app installation from unknown…
Read the original report →Diamond Model
Adversary
Infrastructure
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →1 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | e0714788b4e2518b0d9d4cbf18c7217bb97718e01689d77338f1cc4a230fcb6c | Medium | Score 55/100 | First seen |
IOC Relationship Graph
Building graph…