Skip to content
Enhanced ClayRat Android Spyware Threatens Full Device Control

Enhanced ClayRat Android Spyware Threatens Full Device Control

First seen 8 Dec 2025, 17:49 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

A new variant of the ClayRat Android spyware has been identified, capable of full device takeover. Initially discovered in October 2025, this spyware targets Russian users and has expanded its capabilities to include extensive surveillance and control functions. The latest version combines Default SMS privileges with Accessibility Services to exfiltrate sensitive data and manipulate infected devices.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 225d ago How this analysis works

More articles in this cluster (4)

Following this threat?

Track ClayRat and YouTube in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed