New “KomeX” Android RAT Hits Hacker Forums with Tiered Subscriptions

According to GBHackers On Security, a sophisticated Android remote-access Trojan named KomeX RAT has emerged on underground hacking forums, with the threat actor Gendirector actively marketing the malware through tiered subscription models. The malware, built on the foundation of previously documented BTMOB, poses a significant threat to Android device owners due to its extensive capabilities and aggressive advertising within cybercriminal communities.

Gendirector has adopted a commercial subscription approach to maximise profit while distributing KomeX RAT, with three tiers: a monthly subscription for $500, a lifetime license for $1,200, and the complete source code for $3,000. The advertised feature set allegedly offers live screen streaming up to 60 fps, camera and microphone access, SMS reading/sending/deleting, geolocation with map display, forced chat, app control, and complete file-system access, alongside anti-uninstall protections.

All advertised capabilities represent seller claims and have not been independently verified by security researchers at this time. The lifetime licensing option, in particular, lowers barriers to entry for threat actors with limited budgets.