Flying Eagle Android RAT Traces Found on 170 Servers as Source Code Circulates

The source code for the Flying Eagle Android remote access trojan framework is being shared on criminal Telegram channels. Researchers have identified 170 internet servers with matching control panels and certificates linked to this framework. The Flying Eagle framework is associated with a fake Public Security service application that targets Android users in China. This malicious application is disguised as a legitimate service called "公安一网通办". The framework has capabilities that include support for payment-password features.