StreamRat Android Banking Trojan Spread via Meta Ads to 570K EU Accounts

Wed, 02 Sep 2026 15:05:08 +0000

Engineer — Skip
SOC/IR — Learn: StreamRat demonstrates a malvertising delivery chain for Android banking trojans capable of near-complete device takeover; worth noting the ad-platform distribution vector for mobile threat modeling, though no IOCs or ATT&CK mappings are available to act on today.
Leader — Skip

Guildma (Astaroth) Banking Trojan Delivered via Brazilian Portuguese Email

Tue, 01 Sep 2026 15:28:52 +0000

Engineer — Skip
SOC/IR — Learn: SANS ISC diary on the Astaroth/Guildma infection chain; useful for understanding email-lure TTPs, but the summary is too thin to extract IOCs — read the full diary if this actor targets your sector.
Leader — Skip