Last week, mobile security provider Zimperium warned about the “ClayRat” malware, which can spy on and steal data from infected Android phones. This includes intercepting SMS messages, exfiltrating call logs, and secretly taking photos with the camera. The malware will also use the infected Android phone to target other victims. “ClayRat also spreads aggressively by sending malicious links to every contact in the victim’s phone book, effectively turning each infected device into a distribution hub,” Zimperium said. It’s why the malware appears to be “expanding at an alarming rate,” with Zimperium observing more than 600 samples of the malware in the last three months alone. For now, ClayRat has primarily targeted users in Russia. Hackers are using the messaging app Telegram and fake websites that impersonate brands to trick users into installing the malware, which will masquerade as popular apps, including TikTok, YouTube, and Google Photos. If a user is tricked into installing Cl...