Trusted Design

Rootnik Android Trojan Abuses Commercial Rooting Tool

概要

Palo Alto recently analyzed a Trojan named “Rootnik” which uses a customized commercial root tool named “Root Assistant” to gain root access on Android devices. By reverse engineering and repackaging this tool, the creators of Rootnik successfully stole at least five exploits that give them root access to Android devices that are running Android 4.3 and earlier. Root Assistant was developed by a Chinese company to help individuals gain root access to their own devices. However, Rootnik uses this tool to attack phones all over the world. Based on the data we have collected, Android users in United States, Malaysia, Thailand, Lebanon and Taiwan have been affected by the Trojan thus far.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• Trojan-Banker.AndroidOS.Faketoken follow-up (score: 0.66)
• Group 123 (update June 4th 2018) (score: 0.64)
• Banking Trojan infected dozens of Android apps worldwide (score: 0.64)
• ZBot Malware (score: 0.64)
• Android Trojan C2 (score: 0.63)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る