Craxs Rat, the master tool behind fake app scams and banking fraud

Group-IB analyzed a phishing campaign (from April 2023 onward) that lured Singapore victims to install fake Android apps built with Craxs Rat (a Spymax derivative) which grant extensive permissions and enable full remote control and credential theft; the report documents malware capabilities, base64-encoded C2 configuration, hosting evidence, phishing pages impersonating multiple brands, actor profiling of EVLF and Telegram activity, and recommended defensive best practices.