Android spyware ClayRat uses Telegram & fake WhatsApp/TikTok/YouTube sites to spread.
Abuses SMS handler to steal data & self-propagate via contacts.
Full breakdown: https://www.technadu.com/clayrat-spyware-campaign-targets-android-users-via-telegram-and-fake-whatsapp-tiktok-youtube-sites/611123/
