← Back to BrewedIntel
malwarehighMaaSMobile MalwareRemote Access TrojanMirax RAT

Apr 15, 2026 • Ionut Arghire

Mirax RAT Targeting Android Users in Europe

Security researchers have identified a new RAT-as-a-Service (MaaS) operation called Mirax RAT, being offered exclusively to a limited number of...

Source
SecurityWeek
Category
malware
Severity
high

Executive Summary

Security researchers have identified a new RAT-as-a-Service (MaaS) operation called Mirax RAT, being offered exclusively to a limited number of Russian-speaking affiliates. The malware targets Android users primarily in Europe and has the capability to convert compromised devices into residential proxy nodes for resale. This represents a significant privacy and security risk as devices can be weaponized for malicious activities including credential theft, data exfiltration, and network reconnaissance. Organizations and individuals should ensure mobile devices have updated security patches, avoid installing applications from untrusted sources, and implement mobile endpoint detection solutions to mitigate this threat.

Summary

Offered as a MaaS to a small number of affiliates, mainly Russian speakers, the RAT can turn devices into residential proxy nodes. The post Mirax RAT Targeting Android Users in Europe appeared first on SecurityWeek .

Published Analysis

Security researchers have identified a new RAT-as-a-Service (MaaS) operation called Mirax RAT, being offered exclusively to a limited number of Russian-speaking affiliates. The malware targets Android users primarily in Europe and has the capability to convert compromised devices into residential proxy nodes for resale. This represents a significant privacy and security risk as devices can be weaponized for malicious activities including credential theft, data exfiltration, and network reconnaissance. Organizations and individuals should ensure mobile devices have updated security patches, avoid installing applications from untrusted sources, and implement mobile endpoint detection solutions to mitigate this threat. Offered as a MaaS to a small number of affiliates, mainly Russian speakers, the RAT can turn devices into residential proxy nodes. The post Mirax RAT Targeting Android Users in Europe appeared first on SecurityWeek . Offered as a MaaS to a small number of affiliates, mainly Russian speakers, the RAT can turn devices into residential proxy nodes. The post Mirax RAT Targeting Android Users in Europe appeared first on SecurityWeek .

Linked Entities

  • Mirax RAT