Apr 15, 2026 • Ionut Arghire
Mirax RAT Targeting Android Users in Europe
Security researchers have identified a new RAT-as-a-Service (MaaS) operation called Mirax RAT, being offered exclusively to a limited number of...
Executive Summary
Security researchers have identified a new RAT-as-a-Service (MaaS) operation called Mirax RAT, being offered exclusively to a limited number of Russian-speaking affiliates. The malware targets Android users primarily in Europe and has the capability to convert compromised devices into residential proxy nodes for resale. This represents a significant privacy and security risk as devices can be weaponized for malicious activities including credential theft, data exfiltration, and network reconnaissance. Organizations and individuals should ensure mobile devices have updated security patches, avoid installing applications from untrusted sources, and implement mobile endpoint detection solutions to mitigate this threat.
Summary
Offered as a MaaS to a small number of affiliates, mainly Russian speakers, the RAT can turn devices into residential proxy nodes. The post Mirax RAT Targeting Android Users in Europe appeared first on SecurityWeek .
Published Analysis
Security researchers have identified a new RAT-as-a-Service (MaaS) operation called Mirax RAT, being offered exclusively to a limited number of Russian-speaking affiliates. The malware targets Android users primarily in Europe and has the capability to convert compromised devices into residential proxy nodes for resale. This represents a significant privacy and security risk as devices can be weaponized for malicious activities including credential theft, data exfiltration, and network reconnaissance. Organizations and individuals should ensure mobile devices have updated security patches, avoid installing applications from untrusted sources, and implement mobile endpoint detection solutions to mitigate this threat. Offered as a MaaS to a small number of affiliates, mainly Russian speakers, the RAT can turn devices into residential proxy nodes. The post Mirax RAT Targeting Android Users in Europe appeared first on SecurityWeek . Offered as a MaaS to a small number of affiliates, mainly Russian speakers, the RAT can turn devices into residential proxy nodes. The post Mirax RAT Targeting Android Users in Europe appeared first on SecurityWeek .
Linked Entities
- Mirax RAT