RUSSIAN SPYWARE CLAYRAT IS SPREADING, EVOLVING QUICKLY, ACCORDING TO ZIMPERIUM

Summary from the TLDR InfoSec newsletter

ClayRat, an Android spyware with over 600 samples detected in three months, spreads via fake TikTok and YouTube apps through Telegram and phishing sites, exploiting Android's SMS handler to bypass permissions and steal messages, calls, and device data, with potential for global expansion as infected devices become attack vectors.