Over time, the malware has undergone numerous revisions. Version 5 introduced the ability to turn a malicious APK into an image file (JPEG/PNG) as a delivery mechanism. Version 7 brought amplified capabilities that made detection even harder. As of late 2025 and early 2026, the latest versions— and v7.7 —are circulating, each claiming enhanced stealth and the ability to bypass Google Play Protect. In addition, rebranded variants such as EagleSpy V6.0 and G700 RAT have appeared, demonstrating that the malware continues to spread and evolve even when the original developer faces law‑enforcement pressure.
Heavily used in financial scams across Southeast Asia (particularly Singapore and Malaysia ). craxs rat
: Attackers build highly convincing clones of legitimate banking apps, postal tracking software, utility providers, or adult platforms. Over time, the malware has undergone numerous revisions