A Leaked Android RAT Is Powering 170 Servers and Its Successor Is Already Online

A leaked Android remote access trojan called Flying Eagle is being used across a large and growing criminal network. The toolkit lets operators create fake Android apps, take control of infected phones, and steal information that can lead to financial fraud. The campaign used apps disguised as Chinese Public Security Bureau services to reach potential victims. Fake government apps remain an effective lure because they create urgency and can make people overlook warning signs during installation. Hunt.io analysts identified the malware after tracing a malicious APK to attacker-controlled domains and Telegram channels that distributed the Flying Eagle…