One such spam mail is pretending to be from American Express, informs recipients that their account have been suspended due to suspicious activity.
"Attached to this mail is your statement with the irregular activities highlighted. Please fill in the required information in the form also attached, this is required for us to continue to offer you service in a safe and risk free environment" The spam mail reads.
The attachment is none other than the Java Remote Access Trojan.
So, What is New ?
We aware this Java RAT can run on multiple platforms. Now, it is capable of running on Android Devices. It has also Litecoin-mining plugin. Other than that, it can capture screenshots and display messages.
In addition, the malware has also APK binder component, means it can be used to take legitimate android apps and turn them into malware.