+- Hack Forums (https://hackforums.net)
+-- Forum: General Topics (https://hackforums.net/forumdisplay.php?fid=7)
+--- Forum: World (https://hackforums.net/forumdisplay.php?fid=445)
+---- Forum: News and Happenings (https://hackforums.net/forumdisplay.php?fid=89)
+---- Thread: New ClayRat Spyware Targets Android Users via Fake WhatsApp and TikTok Apps (/showthread.php?tid=6311538)
New ClayRat Spyware Targets Android Users via Fake WhatsApp and TikTok Apps - Stanley - Oct 18, 2025
New ClayRat Spyware Targets Android Users via Fake WhatsApp and TikTok Apps
A rapidly evolving Android spyware campaign called ClayRat has targeted users in Russia using a mix of Telegram channels and lookalike phishing websites by impersonating popular apps like WhatsApp, Google Photos, TikTok, and YouTube as lures to install them.
"Once active, the spyware can exfiltrate SMS messages, call logs, notifications, and device information; taking photos with the front
https://thehackernews.com/2025/10/new-clayrat-spyware-targets-android.html
RE: New ClayRat Spyware Targets Android Users via Fake WhatsApp and TikTok Apps - plops - Oct 18, 2025
Once again - apks from sites claiming to be things like free Youtube premium. Honestly the people they get with this are not the brightest. Probably not the richest either. Maybe its the spreading method after that's so important, sending links to all contacts in the device.
RE: New ClayRat Spyware Targets Android Users via Fake WhatsApp and TikTok Apps - Hackers - Oct 18, 2025
(Oct 18, 2025 06:52 PM)plops Wrote: Once again - apks from sites claiming to be things like free Youtube premium. Honestly the people they get with this are not the brightest. Probably not the richest either. Maybe its the spreading method after that's so important, sending links to all contacts in the device.
Yeah, I think that they're able to spread almost exponentially once they get into enough systems.
A lot of people don't understand security either, and trust that links from Google or elsewhere are legitimate.
Social media spam to friends is also common, although it's more about specific SE rather than those silly spam groups "is this video of you?" or other low effort attempts
RE: New ClayRat Spyware Targets Android Users via Fake WhatsApp and TikTok Apps - The Pact - Oct 18, 2025
ClayRat seems to turn infected phones into distribution hubs, leveraging social trust and app familiarity to spread rapidly. Shows how much mobile malware is evolving towards deep surveillance.
RE: New ClayRat Spyware Targets Android Users via Fake WhatsApp and TikTok Apps - leste - Oct 19, 2025
Fake apps never die, people still download them from random links. Android users really need to stick to the Play Store.
RE: New ClayRat Spyware Targets Android Users via Fake WhatsApp and TikTok Apps - Oh_Well - Oct 21, 2025
How people do even download the wrong TikTok xD
RE: New ClayRat Spyware Targets Android Users via Fake WhatsApp and TikTok Apps - Chorozon - Oct 24, 2025
Android malware is getting more and more common these days , matter of time til its the same with IOS
RE: New ClayRat Spyware Targets Android Users via Fake WhatsApp and TikTok Apps - Hackers - Oct 24, 2025
(Oct 21, 2025 02:31 AM)Oh_Well Wrote: How people do even download the wrong TikTok xD
you'd be surprised...
They start up a lookalike site, get approved, run ads on google for high volume searches and then snipe victims before they get banned from google ads.
RE: New ClayRat Spyware Targets Android Users via Fake WhatsApp and TikTok Apps - PacketPilot - Oct 24, 2025
Yikes—another reminder to only download apps from official stores and double-check permissions before installing.
RE: New ClayRat Spyware Targets Android Users via Fake WhatsApp and TikTok Apps - Palestine - Oct 24, 2025
(Oct 18, 2025 06:20 PM)Stanley Wrote: New ClayRat Spyware Targets Android Users via Fake WhatsApp and TikTok Apps
A rapidly evolving Android spyware campaign called ClayRat has targeted users in Russia using a mix of Telegram channels and lookalike phishing websites by impersonating popular apps like WhatsApp, Google Photos, TikTok, and YouTube as lures to install them.
"Once active, the spyware can exfiltrate SMS messages, call logs, notifications, and device information; taking photos with the front
https://thehackernews.com/2025/10/new-clayrat-spyware-targets-android.html
This is exactly why I never mess with Telegram or even Whatsapp due to potential hackers. I'm glad it happened in Russia and not here in the states
RE: New ClayRat Spyware Targets Android Users via Fake WhatsApp and TikTok Apps - eyeofgod - Jun 19, 2026
(Oct 24, 2025 04:21 PM)Palestine Wrote: This is exactly why I never mess with Telegram or even Whatsapp due to potential hackers. I'm glad it happened in Russia and not here in the states
i had acces to clayrat
it was a good tool created by loodik
the method of distrb was to use hacked phones and send msg to all contacts in tg or whtsp etc
example:photo.apk is it u?
and send it to everyone
EZ