Beware the ClayRat: Sneaky Android Spyware Masquerades as Popular Apps to Target Russians!
ClayRat malware is playing dress-up as popular apps like WhatsApp and TikTok, targeting Russian users. This sneaky spyware can swipe your SMS, call logs, and even make phone calls. With over 600 samples identified, it’s clear the attackers aren’t kitten around! Stay alert, and remember: not everything that glitters is Google Photos!

Hot Take:
Beware of Greeks Bearing Gifts — or in this case, Android Apps! ClayRat isn’t just your average rodent; it’s a full-blown rat infestation on your Android device. It’s like a bad roommate that not only snoops through your stuff but invites the whole neighborhood over to join the party. Russian users, you might want to rethink that Telegram channel subscription, unless you’re ready to host ClayRat’s wild shindig on your phone.
Key Points:
- ClayRat disguises itself as popular apps like WhatsApp and TikTok to trick Russian users.
- The malware spreads through Telegram channels and fake websites that mimic real ones.
- Once installed, it can steal SMS, call logs, and more, while masquerading as a Play Store update.
- With over 600 samples documented, ClayRat’s campaign is massive and potentially expanding.
- Zimperium has shared indicators of compromise with Google to block the malware via Play Protect.