Until then, treat your Android phone like a PC. You wouldn't download an .exe from a random text message. Don't download .apk files either.
In v3, this has evolved. If the victim somehow manages to revoke permissions, the RAT has a persistence module that re-grants them within milliseconds using a system overlay trick. Version 2 had screen streaming, but it was laggy. Version 3 offers near-real-time screen control. The attacker can literally draw on your screen, swipe for you, and type over your banking app. craxsrat v3
If you have been following the underground malware markets over the last 18 months, you have heard the name "CraxsRAT." It started as a relatively standard Remote Access Trojan (RAT) for Android. But with the release of , the game has changed entirely. Until then, treat your Android phone like a PC