MalwarePublished 17 Dec 2025

New $150 Cellik RAT Grants Android Control, Trojanizes Google Play Apps

Source SecurityWeek

Description

The malware provides full device control and real-time surveillance capabilities like those of advanced spyware. The post New $150 Cellik RAT Grants Android Control, Trojanizes Google Play Apps appeared first on SecurityWeek .

Impact

For European organizations, Cellik RAT poses significant risks to confidentiality, integrity, and availability of mobile endpoints. The malware's ability to perform real-time surveillance and data exfiltration threatens sensitive corporate information and personal data, potentially leading to regulatory violations under GDPR. Compromised devices can serve as entry points for broader network infiltration or lateral movement, increasing the risk of widespread compromise. The stealthy infection vector via trojanized Google Play apps complicates detection and response efforts, potentially allowing prolonged undetected access. Organizations with mobile workforces or BYOD policies are particularly vulnerable, as infected devices may connect to corporate networks. The reputational damage from breaches involving employee devices can be substantial, especially in sectors like finance, healthcare, and government. Additionally, the malware's commercial availability suggests a growing ecosystem of affordable, sophisticated Android threats, increasing the likelihood of targeted attacks against European enterprises. The absence of known exploits in the wild currently limits immediate impact but does not preclude future active campaigns. Overall, the threat could disrupt business operations, compromise intellectual property, and erode trust in mobile device security.

Defensive guidance

To mitigate the risk posed by Cellik RAT, European organizations should implement a multi-layered mobile security strategy. First, enforce strict application control policies, restricting installations to verified and vetted apps from official sources, and consider using enterprise app stores or Mobile Application Management (MAM) solutions. Deploy advanced Mobile Threat Defense (MTD) platforms capable of detecting behavioral anomalies and known malware signatures, including trojanized apps. Conduct regular security awareness training focused on mobile threats and the risks of installing untrusted applications. Implement endpoint detection and response (EDR) tools that extend to mobile devices to enable rapid detection and containment. Monitor network traffic for unusual patterns indicative of data exfiltration or command-and-control communications. Apply the principle of least privilege for app permissions, limiting access to sensitive device functions. Regularly update mobile operating systems and apps to reduce exposure to vulnerabilities. Finally, establish incident response plans that include mobile device compromise scenarios and ensure timely forensic analysis and remediation.

References

securityweek.com/new-150-cellik-rat-grants-android-control-trojanizes-google-play-apps/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 17 Dec 2025, 12:58 UTC

References

Community reviews

Related threats