Back to today’s briefing

Story perspectives

ClayRat Malware Targets Russian Android Users via Telegram

10/10/2025

38 6 Full Breakdown

Summary

Story summary

ClayRat targets Android users in Russia via Telegram and phishing sites impersonating popular apps.
In three months, researchers identified over 600 samples and 50 droppers.
It exploits Android's default SMS handler to gain broad permissions.
After installation, it exfiltrates SMS, call logs, and front-camera photos. It also uses fake testimonials and inflated download counts to persuade installs.

1 of 1

Story summary

ClayRat targets Android users in Russia via Telegram and phishing sites impersonating popular apps.
In three months, researchers identified over 600 samples and 50 droppers.
It exploits Android's default SMS handler to gain broad permissions.
After installation, it exfiltrates SMS, call logs, and front-camera photos. It also uses fake testimonials and inflated download counts to persuade installs.