Mirax RAT Expands Mobile Banking and Surveillance Threats

A newly identified Android remote access trojan called Mirax is actively being distributed through malicious applications and social-engineering lures. The RAT grants attackers full control of infected devices — including screen monitoring, credential harvesting, and remote command execution — and operates inside legitimate apps to bypass security checks, facilitating unauthorized transactions and data exfiltration; the campaign combines financial fraud with surveillance and highlights the need for stricter app controls, minimal permissions, and behavior-based monitoring.