CyberSecurityBoardThreat Intel · CVEs · Products
Critical CVEs

Meta Ads Push StreamRat Android Trojan That Can Gain Near-Complete Device Control

September 2, 2026

Meta Ads Push StreamRat Android Trojan That Can Gain Near-Complete Device Control The Hacker NewsSep 02, 2026Malvertising / Mobile Security Cybersecurity researchers have disclosed details of a new Android banking trojan called StreamRat that was promoted to Spanish-speaking users through a fake television-streaming campaign on Meta and can give operators near-complete control of infected devices. ThreatFabric said the campaign's advertisement focused on Spain and reached an estimated 570,950 Meta accounts in the European Union that saw it at least once, with totals for infected devices and confirmed victims remaining unreported. Device takeover requires the victim to grant a succession of controls after sideloading the Android Package (APK). Users should stop the installation when a streaming app requests system controls unrelated…