Fake Bahrain Civil Defense App Deploys Android RAT to Steal PINs, OTPs, and Banking Credentials

A sophisticated Android malware campaign is exploiting heightened geopolitical tensions in the Gulf region by masquerading as an official Bahrain Civil Defense emergency alert application. Security researchers have uncovered a fake “BH Alert” app that delivers a multi-stage Remote Access Trojan (RAT) capable of harvesting sensitive user data, including lockscreen PINs, one-time passwords (OTPs), SMS messages, and banking credentials. Throughout July, Gulf nations such as Bahrain and Kuwait activated civil defense sirens and emergency guidance following regional missile threats. This surge in public safety awareness has driven increased downloads of official alert apps, creating an opportunistic window for threat...

Read the full article at the source.