A new Android RAT turning infected devices into potential residential proxy nodes

Reported 13 Apr 2026 by otx · Severity: medium

Mirax is a newly identified Android Remote Access Trojan operating as Malware-as-a-Service, actively targeting European users, particularly in Spanish-speaking regions. Distributed through Meta advertisements and GitHub-hosted droppers, the malware has reached over 200,000 accoun