logo

Macintosh HD:Users:Shared:dd:4work:Bitdefender-PR-Whitepaper-BitterAPT-creat4571-en_EN:Bitdefender-PR-Whitepaper-BitterAPT-creat4571-en_EN.indd

ID: db75b1cb-8dc2-42f5-9e9f-eaa2ebd13009

STIX ID: report--db75b1cb-8dc2-42f5-9e9f-eaa2ebd13009

Threat Score

85/100

Uploaded: 2026-08-15

Published Date: 2020-06-16

Last Modified Date: 2020-06-16

Created by: dogesec

TLP:CLEAR
ADMIRALTY:B2
PAP:CLEAR
...
...
Bitdefender analyzes BitterAPT (BitterRAT/SlideRAT), an Android espionage tool used in targeted campaigns against Pakistan, China and other South Asian targets. The report explains BitterRAT's evolution from AndroRAT to bespoke RATs, documents distribution methods (including weaponized apps on Google Play under the CreativeFox developer), detailed spying modules (call recording, WhatsApp/BBM extraction via accessibility services, file and device data exfiltration), C2 domains and active IOCs, and provides telemetry and recommendations for detection and mitigation.