Enhanced ClayRat Android Spyware Threatens Full Device Control

A new variant of the ClayRat Android spyware has been identified, capable of full device takeover. Initially discovered in October 2025, this spyware targets Russian users and has expanded its capabilities to include extensive surveillance and control functions. The latest version combines Default SMS privileges with Accessibility Services to exfiltrate sensitive data and manipulate infected devices.