Your smartphone is no longer a secure place to keep your contacts and some music. Most Android smartphone users have sensitive information stored on their devices.

While you might be considerate with using a strong password, only connecting to safe Wi-Fi, and avoiding suspicious files, you can still fall victim to a Remote Access Trojan attack.

What Is a Remote Access Trojan and How Does It Attack?

A Remote Access Trojan, or RAT, is a type of malware that disguises itself as a file that’s either harmless or beneficial to the user—this could be anything from a file to programs and apps.

But unlike other types of malware, a RAT doesn’t just steal or ruin data and files it was pre-programmed to do. It instead grants the cybercriminal behind it complete and remote access to your device.

If the attacker is careful enough, you might not notice your device has been infected until it’s too late. The attacker can have unlimited access to all of your files, apps, and all the data stored on them like passwords and personal information.

Unfortunately, RAT attacks have grown significantly since they were first created in the 1990s. Avoiding a RAT attack nowadays is much harder than simply abstaining from downloading untrustworthy files and apps. One way a RAT can hit your Android device is through a seemingly legitimate system update notification.

Is Your Android System Update Hiding a RAT?

android phone

Regularly updating your Android system is one of the best ways to keep your device secure. The latest systems often have security bugs fixed and are overall more secure than their predecessors.

But what can you do to make sure there is a genuine system update pending?

The new system update Android RAT hitches a ride on files from suspicious websites or phishing emails. It may also originate from unsafe apps your might’ve installed as APK and not from the Google Play Store.

The RAT malware sends you a seemingly-genuine notification pretending to be Google, informing you there’s a new update. In some cases, it also appears to ‘search for updates’ to seem more legit.

In order to make sure the system update is legit and isn’t the new RAT malware, don’t update through notifications. Instead, go directly to your phone’s Settings and visit the official updater on your phone to check for available updates.

Related: How to Update Everything and Why

If there are no updates available, the notification might've been a Remote Access Trojan. Even if there is an update, install it through the Settings apps.

How to Get Rid of a Remote Access Trojan on Android

android malware featured

Here’s how to get rid of a Remote Access Trojan on your Android device.

While you should assume that a portion of the data and files on your phone has been compromised, you need to limit the damage.

Manually disconnect internet access on your phone to cut the remote access of the attacker. You should also change all passwords and financial information that was on your phone using a separate and clean device.

To remove the RAT from your phone, you need to delete it. If you’ve downloaded or installed any suspicious files or apps recently, start by deleting those and clearing your device's memory of their data. To be safe, delete all of your browsing data and uninstall and reinstall any browsers or suspected apps.

Ideally, this should be enough to clean your device. However, if you don’t know or aren’t sure of where the malware could be, you might need to delete everything on your phone by factory resetting it.

Malware on Android: Ask for Help

Clearing malware from your phone can be easier said than done, especially if you’re not tech-savvy.

If you suspect you’ve installed a RAT on your device don’t hesitate in reaching out for help from a local phone technician or from online sources and tutorials. Left untreated, a RAT could ruin your phone and your life.