logo

New Android spyware ClayRat imitates WhatsApp, TikTok, YouTube

ID: 5950518a-db8c-5391-9212-78989cfd7c07

STIX ID: report--5950518a-db8c-5391-9212-78989cfd7c07

Feed Name: Bleeping Computer

Threat Score
72/100

Date Published: 2025-10-09

Date Updated: 2026-04-20

Author: Bill Toulas

...
...

ClayRat is a large-scale Android spyware campaign that lures victims with fake apps and Play Store–style sideload pages (distributed via Telegram and malicious sites), installs via session-based droppers to bypass Android protections, and exfiltrates SMS, call logs, notifications, camera images and device info while propagating via mass SMS; researchers observed 600+ samples and 50 distinct droppers and have shared IoCs with Google.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.