Trolling as a Service: How the New CrystalX RAT Uses “Prankware” to Torture Its Victims

Kaspersky researchers identified CrystalX RAT (aka Webcrystal) — a Malware‑as‑a‑Service promoted via Telegram since March 2026 — that combines traditional backdoor/stealer/keylogger functionality with a unique “prankware” module designed to annoy victims. The malware, written in Go and under active development, has been linked to infection attempts largely in Russia but is capable of broader cross‑platform impact; the report warns professionals to watch for unauthorized remote access and unusual user‑interaction disruptions that may indicate compromise.