Back Cybersecuritynews

SURXRAT Android RAT Attacking Users Gain Complete Device

Cybersecuritynews •Tushar Subhra Dutta • February 25, 2026

The mobile threat landscape is witnessing a significant shift toward professionalized cybercriminal operations, driven by the increasing availability of sophisticated malicious tools. A new and potent threat known as SURXRAT has recently emerged, operating as a high-functioning Remote Access Trojan designed to compromise Android devices. Unlike simple malicious applications that rely on basic tricks, this […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SURXRAT Trojan Operates as Malware-as-a-Service on Telegram SURXRAT, an Android Remote Access Trojan (RAT), is being commercially distributed through a Telegram-based malware-as-a-service (MaaS) network. The operation allows affiliates to create customized builds while the core operator maintains centralized control. Cyble Research and Intelligence Labs (CRIL) have identified over 180 variants of SURXRAT. 10 sources 54

Extracted Entities

SURXRAT Android RAT Attacking Users Gain Complete Device

The full story

Extracted Entities

Attack Types (1)

Malware (1)

Platforms (1)