New ‘Fully Undetectable’ Android RAT Discovered on GitHub

A new Android Remote Access Trojan dubbed the “Most Powerful (FUD Android RAT) 2025” has appeared at the repository Huckel789/Android-RAT on GitHub, marketed as a fully undetectable (FUD) RAT designed to evade antivirus permanently. Hosted at that repository, the tool promises to deliver a feature‑rich, web‑based C2 experience that can be managed from any modern browser on Android, Linux, or Windows, with the web console connecting directly to infected devices.

It emphasises True Zero Detect, claiming to permanently evade antivirus and VirusTotal scans, while including an anti‑emulator and anti‑VM system to operate only on physical hardware. Once installed, it automatically grants permissions, hides its icon, injects a dropper into legitimate APKs, and can drop into the attack chain without revealing IP addresses or ports in decompiled code.

Capabilities are extensive, including call recording, interception of SMS and 2FA codes, credential theft from banking apps and crypto wallets, keystroke capture, location tracking, live camera feeds, file management, and ransomware‑style encryption, all supported by AES‑128‑CBC with PKCS padding for encrypted C2 communications.