Beware the ClayRat: Sneaky Android Spyware Masquerades as Popular Apps to Target Russians!

ClayRat malware is playing dress-up as popular apps like WhatsApp and TikTok, targeting Russian users. This sneaky spyware can swipe your SMS, call logs, and even make phone calls. With over 600 samples identified, it’s clear the attackers aren’t kitten around! Stay alert, and remember: not everything that glitters is Google Photos!

Pro Dashboard

Hot Take:

Beware of Greeks Bearing Gifts — or in this case, Android Apps! ClayRat isn’t just your average rodent; it’s a full-blown rat infestation on your Android device. It’s like a bad roommate that not only snoops through your stuff but invites the whole neighborhood over to join the party. Russian users, you might want to rethink that Telegram channel subscription, unless you’re ready to host ClayRat’s wild shindig on your phone.

Key Points:

  • ClayRat disguises itself as popular apps like WhatsApp and TikTok to trick Russian users.
  • The malware spreads through Telegram channels and fake websites that mimic real ones.
  • Once installed, it can steal SMS, call logs, and more, while masquerading as a Play Store update.
  • With over 600 samples documented, ClayRat’s campaign is massive and potentially expanding.
  • Zimperium has shared indicators of compromise with Google to block the malware via Play Protect.

Membership Required

 You must be a member to access this content.

View Membership Levels
Already a member? Log in here
The Nimble Nerd
Confessional Booth of Our Digital Sins

Okay, deep breath, let's get this over with. In the grand act of digital self-sabotage, we've littered this site with cookies. Yep, we did that. Why? So your highness can have a 'premium' experience or whatever. These traitorous cookies hide in your browser, eagerly waiting to welcome you back like a guilty dog that's just chewed your favorite shoe. And, if that's not enough, they also tattle on which parts of our sad little corner of the web you obsess over. Feels dirty, doesn't it?