GoKawiil
BTMOB Android malware service generates custom phishing payloads
(bleepingcomputer.com)
1.
2.
BTMOB RAT Spreads Across Brazil, LatAm via MaaS Model
(darkreading.com)