A new Android spyware campaign called ClayRat is actively targeting users in Russia by impersonating popular apps and using malicious links and websites. The malware can exfiltrate sensitive data, control device functions, and propagate itself through contacts, making it a significant surveillance threat. #ClayRat #AndroidSpyware #C2Servers
Keypoints
- ClayRat employs lookalike phishing websites and Telegram channels to infect victims.
- The malware can capture SMS, call logs, photos, and send messages or make calls remotely.
- It spreads by sending malicious links to contacts and disguises payloads as fake app updates.
- The malware uses encrypted payloads hidden behind lightweight installers to bypass security measures.
- ClayRat transforms infected devices into distribution nodes for further malware dissemination.
Read More: https://thehackernews.com/2025/10/new-clayrat-spyware-targets-android.html