Skip to content
Russian 'Fantasy Hub' Android RAT Targets Financial Data Theft

Russian 'Fantasy Hub' Android RAT Targets Financial Data Theft

First seen 23 Nov 2025, 03:35 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

Zimperium and zLabs researchers have identified 'Fantasy Hub', a Russian malware-as-a-service Android RAT that enables attackers to control infected devices and steal sensitive information. The malware is marketed on Russian-language channels and includes features for SMS interception, call log theft, and fake banking windows to capture credentials. Financial institutions are particularly targeted by this spyware.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 213d ago How this analysis works

More articles in this cluster (1)

Following this threat?

Track Fantasy Hub and Alfa in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed