New CrystalRAT malware adds RAT, stealer and prankware features

Kaspersky researchers describe CrystalX (CrystalRAT), a Go-based Malware-as-a-Service marketed on Telegram and YouTube that offers remote access, extensive data-stealing functionality (browser and desktop app targeting), real-time keylogging and clipboard clippers, and a unique set of prankware features; the malware uses an automated builder, anti-analysis protections, ChaCha20-encrypted zlib payloads, and a WebSocket C2 for operator control.