Ankura CTIX FLASH Update - October 14, 2025

MALWARE ACTIVITY

Advanced Spyware and Botnets Targeting Global Infrastructure

Recent cybersecurity reports highlight the rise of sophisticated malware campaigns, including the Android spyware ClayRat and the botnet RondoDox. Both campaigns demonstrate significant threat levels. ClayRat is actively targeting Russian users by pretending to be popular apps like WhatsApp, TikTok, and YouTube. The malicious apps are using convincing phishing websites and Telegram channels. Once installed, it can steal messages, call logs, notifications, and even make calls showcasing its advanced surveillance capabilities. It uses realistic fake websites and stealthy techniques to bypass security measures and spreads by sending SMS messages to contacts, making it a persistent threat despite efforts from Google's Play Protect. Meanwhile, RondoDox emerged in 2025 as a powerful botnet exploiting over fifty (50) vulnerabilities across more than thirty (30) types of devices. The devices