US EditionNew CrystalRAT Malware Adds RAT, Stealer and Prankware Features
Kaspersky says CrystalX combines remote access and data theft with prankware features that can change settings, disable input devices and show fake notifications.
6 Articles
6 Articles
Newly discovered CrystalX RAT malware 'pranks' its victims
Cybersecurity researchers have discovered a brand new malware threat called CrystalX RAT, which is making its way around private hacker group chats and forums.What sets CrystalX RAT apart from other malware? It's an all-in-one hacker tool that includes data stealing and spyware capabilities. Furthermore, perhaps just in time for April Fools' Day, CrystalX RAT also has unique "prankware" capabilities that can mock and troll its victims in real-ti…
New RAT malware steals data — then taunts its victims
Cybersecurity firm Kaspersky has uncovered an active malicious campaign distributing a previously undocumented remote access trojan (RAT) that combines extensive data theft capabilities with an unusual “prankware” feature designed to psychologically taunt its victims. Dubbed CrystalX RAT, the malware is being sold as malware-as-a-service (MaaS) and actively promoted on YouTube and Telegram, raising the likelihood […] The post New RAT malware ste…
A new remote access Trojan threatens users worldwide. CrystalX RAT combines theft functions with psychologically acting prankware. Attacks on systems become directly noticeable. CrystalX RAT in the eyes of security researchers Kaspersky researchers have identified a new malware campaign that spreads a previously unknown remote access Trojan (RAT). CrystalX RAT not only steals sensitive data but also plays tricks on its victims. These include mou…
An analysis of CrystalX commercial RAT with prankware features
Introduction In March 2026, we discovered an active campaign promoting previously unknown malware in private Telegram chats. The Trojan was offered as a MaaS (malware‑as‑a‑service) with three subscription tiers. It caught our attention because of its extensive arsenal of capabilities. On the panel provided to third‑party actors, in addition to the standard features of RAT‑like malware, a stealer, keylogger, clipper, and spyware are also availabl…
Coverage Details
Bias Distribution
- 50% of the sources lean Left, 50% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
