New ClayRat Spyware Targets Android Users via Fake WhatsApp and TikTok Apps
ClayRat, a rapidly developing Android spyware operation, has used a combination of lookalike phishing websites and Telegram channels to target consumers in Russia by pretending to be well-known apps like YouTube, WhatsApp, Google Photos, and TikTok in order to trick them into installing them.
In a report shared with The Hacker News, Zimperium researcher Vishnu Pratapagiri stated that once the spyware is activated, it can exfiltrate SMS messages, call logs, notifications, and device information; take pictures with the front camera; and even send SMS messages or make calls straight from the victim's device.
Additionally, the virus is made to spread by sending malicious URLs to all of the contacts in the victim's phone book. This suggests that the attackers are using aggressive techniq...