SURXRAT Malware Gives Hackers Complete Access To Android Devices

Back Cyberpress

SURXRAT Malware Gives Hackers Complete Access To Android Devices

Cyberpress • February 25, 2026

Share: View original

The malware is marketed via a Telegram channel run by an Indonesian threat actor , who provides resellers with access to different purchase tiers.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SURXRAT Trojan Operates as Malware-as-a-Service on Telegram SURXRAT, an Android Remote Access Trojan (RAT), is being commercially distributed through a Telegram-based malware-as-a-service (MaaS) network. The operation allows affiliates to create customized builds while the core operator maintains centralized control. Cyble Research and Intelligence Labs (CRIL) have identified over 180 variants of SURXRAT. 10 sources 54

Extracted Entities

Attack Types (1)

Malware (1)

Platforms (1)