New Android Spyware ClayRat Imitates WhatsApp, TikTok, YouTube

New Android spyware ClayRat imitates WhatsApp, TikTok, YouTube

A new Android spyware called ClayRat is luring potential victims by posing as popular apps and services like WhatsApp, Google Photos, TikTok, and YouTube.

ClayRat campaign uses Telegram and phishing sites to distribute Android spyware - Cybernoz - Cybersecurity News

ClayRat campaign uses Telegram and phishing sites to distribute Android spyware Pierluigi Paganini October 09, 2025 ClayRat Android spyware targets Russian users via fake Telegram channels and phishing sites posing as popular apps like WhatsApp and YouTube. The ClayRat Android spyware campaign targets Russian users via fake Telegram channels and phishing sites posing as popular apps like Google Photos, WhatsApp, TikTok, YouTube. …

Fake TikTok and WhatsApp Apps Infect Android Devices with ClayRat Spyware

Zimperium's zLabs warns of ClayRat, a fast-spreading Android spyware targeting Russia. It hides in fake apps like TikTok and steals texts, calls records, and camera photos.

New ClayRat Spyware Targets Android Users via Fake WhatsApp and TikTok Apps

A rapidly evolving Android spyware campaign called ClayRat has targeted users in Russia using a mix of Telegram channels and lookalike phishing websites by impersonating popular apps like WhatsApp, Google Photos, TikTok, and YouTube as lures to install them. "Once active, the spyware can exfiltrate SMS messages, call logs, notifications, and device information; taking photos with the front

Zimperium Uncovers “ClayRat” Spyware : Fast-Evolving Android Campaign Turns Victims Into Distribution Hubs – Global Security Mag Online

Zimperium announced new research from its zLabs team exposing ClayRat, a rapidly expanding Android spyware campaign targeting Russian users. Disguised as popular apps such as WhatsApp, TikTok, Google Photos, and YouTube, ClayRat steals sensitive information including SMS, call logs, device data, and front-camera photos. While exploiting Android's default SMS handler role to bypass security prompts. Once active, it sends malicious links to every …

ClayRat spyware turns phones into distribution hubs via SMS and Telegram

A fast-evolving Android spyware campaign known as “ClayRat,” initially targeting Russian users but now spreading far beyond, has produced more than 600 samples and 50 droppers in just three months. According to Zimperium’s Zlabs observations, ClayRat is distributed via phishing sites and Telegram channels posing as popular apps such as TikTok, YouTube, and Google Photos, to trick users into sideloading infected APKs. Apart from secretly reading …