The malware is primarily targeting users in Russia, but cybersecurity vendor Zimperium says the hackers behind it are rapidly refining their attack.
A cybersecurity vendor has discovered a new Android malware strain that spreads by infecting a handset and then sending malicious links to every contact in the victim’s phone book.
On Thursday, mobile security provider Zimperium warned about the “ClayRat” malware, which can spy on and steal data from infected Android phones. This includes intercepting SMS messages, exfiltrating call logs, and secretly taking photos with the camera.
The malware will also use the infected Android phone to target other victims. “ClayRat also spreads aggressively by sending malicious links to every contact in the victim’s phone book, effectively turning each infected device into a distribution hub,” Zimperium said. It’s why the malware appears to be “expanding at an alarming rate,” with Zimperium observing more than 600 samples of the malware in the last three months alone.
For now, ClayRat has primarily targeted users in Russia.
