Source code for the Flying Eagle Android remote access trojan (RAT) framework is circulating through criminal Telegram channels. Hunt.io and independent researcher NetAskari traced matching control panels and certificates to 170 internet servers.

They linked the framework to a fake "公安一网通办" Public Security service application targeting Android users in China. The kit supports payment-password