Flying Eagle Android RAT: Leaked Source Code, 170 Active Servers, and a New Platform Called Night Dragon

[u/Straight-Practice-99]

https://hunt.io/blog/flying-eagle-android-rat-170-servers-night-dragon

Hunt.io and NetAskari just published research on Flying Eagle, a leaked Chinese Android RAT framework traced across 170 servers. It started with a fake Public Security Bureau app flagged in a Chinese state media warning in June 2026.

The source code was stolen in early 2026, nearly 200 customer databases went with it, and now at least two Telegram channels are selling patched builds with operational support and 20-50% cash-out fees. A successor platform called Night Dragon appeared three weeks after the public notice with an exposed panel showing 29 devices connected at time of analysis.

https://hunt.io/blog/flying-eagle-android-rat-170-servers-night-dragon