Cybercriminals are distributing malware among Russian users of Android devices.
This was reported by experts from the FACCT company and the Russian Ministry of Internal Affairs.
The attackers began distributing a program called CraxsRAT, which they nicknamed the "rat king," according to the FACCT website .
The software is dangerous for users and effective for criminals. It allows for easy remote control of an infected device.
It controls the microphone, camera, intercepts calls, messages, sends notifications and can even provide access to banking information and passwords.
Malware is distributed primarily in WhatsApp or another messenger under the guise of an official application or update.
The file name may contain familiar names. For example, "Gosuslugi", the Ministry of Health, the Central Bank or another agency.
In addition, experts found malware in files named "LIST.SVO2024", "State Lists of SVO", "lists of prisoners of war", "spiski".
Users should first and foremost be aware of who is sending the file. Unknown sources should be ignored.
It is also possible that the account of relatives or friends could have been hacked.
