New ClayRat Spyware Targets Android Users via Fake WhatsApp and TikTok Apps
A rapidly evolving Android spyware campaign called ClayRat has targeted users in Russia using a mix of Telegram channels and lookalike phishing websites by impersonating popular apps like WhatsApp, Google Photos, TikTok, and YouTube as lures to install them.
"Once active, the spyware can exfiltrate SMS messages, call logs, notifications, and device information; taking photos with the front
https://thehackernews.com/2025/10/new-cl...droid.html
I am the official HF Help Bot. You might get an automated PM from me with some helpful information.
Please read our Help Docs.
Once again - apks from sites claiming to be things like free Youtube premium. Honestly the people they get with this are not the brightest. Probably not the richest either. Maybe its the spreading method after that's so important, sending links to all contacts in the device.
DO NOT DEAL WITH THIS MEMBER
(Oct 18, 2025 06:52 PM)plops Wrote: Once again - apks from sites claiming to be things like free Youtube premium. Honestly the people they get with this are not the brightest. Probably not the richest either. Maybe its the spreading method after that's so important, sending links to all contacts in the device.
Yeah, I think that they're able to spread almost exponentially once they get into enough systems.
A lot of people don't understand security either, and trust that links from Google or elsewhere are legitimate.
Social media spam to friends is also common, although it's more about specific SE rather than those silly spam groups "is this video of you?" or other low effort attempts
ClayRat seems to turn infected phones into distribution hubs, leveraging social trust and app familiarity to spread rapidly. Shows how much mobile malware is evolving towards deep surveillance.
DO NOT DEAL WITH THIS MEMBER
Fake apps never die, people still download them from random links. Android users really need to stick to the Play Store.
How people do even download the wrong TikTok xD
Android malware is getting more and more common these days , matter of time til its the same with IOS
DO NOT DEAL WITH THIS MEMBER
(Oct 21, 2025 02:31 AM)Oh_Well Wrote: How people do even download the wrong TikTok xD
you'd be surprised...
They start up a lookalike site, get approved, run ads on google for high volume searches and then snipe victims before they get banned from google ads.
Yikes—another reminder to only download apps from official stores and double-check permissions before installing.
(Oct 18, 2025 06:20 PM)Stanley Wrote: New ClayRat Spyware Targets Android Users via Fake WhatsApp and TikTok Apps
A rapidly evolving Android spyware campaign called ClayRat has targeted users in Russia using a mix of Telegram channels and lookalike phishing websites by impersonating popular apps like WhatsApp, Google Photos, TikTok, and YouTube as lures to install them.
"Once active, the spyware can exfiltrate SMS messages, call logs, notifications, and device information; taking photos with the front
https://thehackernews.com/2025/10/new-cl...droid.html
This is exactly why I never mess with Telegram or even Whatsapp due to potential hackers. I'm glad it happened in Russia and not here in the states
NATIONALLY REGISTERED EMT/PARAMEDIC SIGNATURE SPACE FOR SALE
![[Image: ggtjrPj.png]](https://i.imgur.com/ggtjrPj.png)
(Oct 24, 2025 04:21 PM)Palestine Wrote: This is exactly why I never mess with Telegram or even Whatsapp due to potential hackers. I'm glad it happened in Russia and not here in the states
i had acces to clayrat
it was a good tool created by loodik
the method of distrb was to use hacked phones and send msg to all contacts in tg or whtsp etc
example:photo.apk is it u?
and send it to everyone
EZ
|