Unsuspecting mobile device users are being targeted by the Xsser mobile remote access Trojan (mRAT), with attackers, described as “malicious actors”, tricking users into downloading unverified apps.