: Silent recording of audio via the microphone, taking secret photos using both front and rear cameras, and tracking the device's live GPS location.
The tool is marketed on specialized hacker forums and Telegram channels: craxs rat
: The developer released Craxs RAT v7.5 in April 2024, which introduced even more robust obfuscation and stealth features. A successor or related variant known as G700 RAT has also been identified, targeting financial and cryptocurrency environments. Pricing and Availability : Silent recording of audio via the microphone,
: Victims are often lured into downloading malicious APK files disguised as legitimate apps, such as updates for government services (e.g., "Mincifry" in Russia) or anti-virus software. Pricing and Availability : Victims are often lured
: Once installed, the malware uses Accessibility Services to grant itself extensive permissions automatically. It also employs anti-deletion mechanisms, such as closing the "Uninstall" or "Device Admin" screens if a user tries to access them.
: It is particularly notorious for its ability to bypass Google Play Protect , as well as black screens used by banking and crypto apps to prevent screen capturing.
: Attackers can view the device screen in real-time at up to 60 FPS, perform gestures, and use the device's keyboard.