Koktevrat Obfuscated Components

Arnold Chan@slaz

•updated Sep 17, 2026•0•0•0

Detects Koktevrat Android RAT APK artifacts via obfuscated component class names (JyfNnJyj, GtVyayDo) and the Stage 2 package identifier com.kowo.ciligeci