{"id":3691,"date":"2026-04-02T16:25:00","date_gmt":"2026-04-02T23:25:00","guid":{"rendered":"https:\/\/www.wiki-living.com\/index.php\/2026\/04\/02\/this-new-laughing-mouse-malware-will-steal-your-data-and-hack-your-systems-and-laugh-at-you-while-doing-it\/"},"modified":"2026-04-03T12:38:32","modified_gmt":"2026-04-03T19:38:32","slug":"this-new-laughing-mouse-malware-will-steal-your-data-and-hack-your-systems-and-laugh-at-you-while-doing-it","status":"publish","type":"post","link":"https:\/\/www.wiki-living.com\/index.php\/2026\/04\/02\/this-new-laughing-mouse-malware-will-steal-your-data-and-hack-your-systems-and-laugh-at-you-while-doing-it\/","title":{"rendered":"This new &#8216;laughing mouse&#8217; malware will steal your data and hack your systems &#8211; and laugh at you while doing it."},"content":{"rendered":"<p><br \/>\n<\/p>\n<div id=\"article-body\">\n<hr id=\"elk-54425299-9868-4e7b-bdf0-4b832cd766a2\"\/>\n<ul id=\"elk-37371436-2def-4ae7-9aa8-8a83bddecc16\">\n<li><strong>CrystalX RAT provides advanced remote access and data theft<\/strong><\/li>\n<li><strong>It includes prankware features to attract novice hackers<\/strong><\/li>\n<li><strong>Promoted through Telegram and YouTube subscription campaigns<\/strong><\/li>\n<\/ul>\n<hr id=\"elk-8dbe621e-e72e-43e2-b795-586a376ec8a9\"\/>\n<p id=\"elk-89c0b648-03f6-49c6-8191-1d03c5b8b6df\">Security researchers warn about a new malware service offered on the dark web, apart from advanced and highly disruptive capabilities, it also enables various and annoying pranks.<\/p>\n<p>Cybersecurity experts Kaspersky have detailed the CrystalX RAT, a new malware-as-a-service (MaaS) offering similar to the popular WebRAT.<\/p>\n<aside data-block-type=\"embed\" data-render-type=\"fte\" data-skip=\"dealsy\" data-widget-type=\"seasonal\" class=\"hawk-root\"\/>\n<p id=\"elk-89c0b648-03f6-49c6-8191-1d03c5b8b6df-2\">&#8220;CrystalX RAT represents a highly functional MaaS platform that is not limited to espionage capabilities &#8211; spyware, keylogging and remote control &#8211; but includes unique stealth and prankware features,&#8221; the researchers explained. &#8220;Combined with the growing PR campaign of the CrystalX RAT, it can be concluded that the number of victims may increase significantly in the near future.&#8221;<\/p>\n<p><span class=\"article-continues-below block py-2 text-sm\">The article continues below <svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" aria-hidden=\"true\" class=\"inline-block w-2.5 h-2.5 ml-2\" fill=\"currentColor\" preserveaspectratio=\"xMidYMid meet\" viewbox=\"0 0 1000 1000\"><path d=\"M1000 100L500 900 0 100h1000z\"\/><\/svg><\/span><\/p>\n<aside data-component-name=\"Recirculation:ArticleRiver\" data-recirculation-type=\"inline\" data-mrf-recirculation=\"Trending Bar\" data-nosnippet=\"\" class=\"clear-both pb-0 pt-2 mb-4\">\n        <span class=\"&#10;            flex&#10;            after:content-[''] after:flex-1 after:ml-4 after:my-[0.7rem] after:border-t after:border-solid after:border-t-[#ccc]&#10;            before:content-[''] before:flex-1 before:mr-4 before:my-[0.7rem] before:border-t before:border-solid before:border-t-[#ccc]&#10;            font-article-heading pb-0 !text-base uppercase sm:text-sm font-bold&#10;        \"><\/p>\n<p>            You might like it<br \/>\n        <\/span><\/p>\n<\/aside>\n<h2 id=\"pr-campaign-3\">PR campaign<\/h2>\n<p id=\"elk-5c28a411-fdb4-4a55-ac70-48e3056654bf\">This tool has a lot to offer &#8211; from remote access and system management, it enables command execution, arbitrary file download\/upload, file system browsing, real-time machine control, and forced system shutdown.<\/p>\n<p>For data theft and data theft, it allows key entry, clipboard hacking, browser data theft, and desktop application data theft (Steam, Discord, Telegram).<\/p>\n<p>Finally, for surveillance, it allows video recording with the camera, and audio recording with the microphone.<\/p>\n<p>At the same time, it can be seen as prankware, too. There are a few annoying features thrown into the mix, such as the ability to change the desktop background images, change the display orientation to various angles, display a fake notification, change the cursor position, hide the desktop icons, the taskbar, the Task Manager, and the executable Command Prompt, and remap the mouse.<\/p>\n<div id=\"slice-container-newsletterForm-articleInbodyContent-oTLPTJmQhVeTR7SngAADoU\" class=\"slice-container newsletter-inbodyContent-slice newsletterForm-articleInbodyContent-oTLPTJmQhVeTR7SngAADoU slice-container-newsletterForm\">\n<div data-hydrate=\"true\" class=\"newsletter-form__wrapper newsletter-form__wrapper--inbodyContent\">\n<div class=\"newsletter-form__container\">\n<section class=\"newsletter-form__top-bar\"\/>\n<section class=\"newsletter-form__main-section\">\n<p class=\"newsletter-form__strapline\">Sign up for the TechRadar Pro newsletter to get all the top news, ideas, features and guidance your business needs to succeed!<\/p>\n<\/section>\n<\/div>\n<\/div>\n<\/div>\n<p>Finally, it provides an attacker-victim chat window, which allows attackers to tease, taunt, threaten, or demand money from their victims.<\/p>\n<p>The PR campaign that Kaspersky is talking about is a series of well-planned campaigns on different channels designed to attract potential buyers, as CrystalX RAT works on a tiered subscription model. Unfortunately, there&#8217;s no word on how much the subscription costs. We only know that there are many categories on offer.<\/p>\n<p>The main channel for promotions and subscriptions is Telegram, a popular instant chat platform. However, MaaS is also being promoted on YouTube using a dedicated marketing channel that showcases its unique features and capabilities.<\/p>\n<aside data-component-name=\"Recirculation:ArticleRiver\" data-recirculation-type=\"inline\" data-mrf-recirculation=\"Trending Bar\" data-nosnippet=\"\" class=\"clear-both pb-0 pt-2 mb-4\">\n        <span class=\"&#10;            flex&#10;            after:content-[''] after:flex-1 after:ml-4 after:my-[0.7rem] after:border-t after:border-solid after:border-t-[#ccc]&#10;            before:content-[''] before:flex-1 before:mr-4 before:my-[0.7rem] before:border-t before:border-solid before:border-t-[#ccc]&#10;            font-article-heading pb-0 !text-base uppercase sm:text-sm font-bold&#10;        \"><\/p>\n<p>            What you can read next<br \/>\n        <\/span><\/p>\n<\/aside>\n<p>In addition, Kaspersky says that the prankware features are also, in a sense, a PR stunt, since such an offer will probably stand out in the sea of \u200b\u200bvarious malware-as-a-service solutions.<\/p>\n<h2 id=\"designed-for-noobs-targets-russians-3\">Designed for noobs, aimed at Russians<\/h2>\n<figure class=\"van-image-figure inline-layout\" data-bordeaux-image-check=\"\" id=\"elk-282dbd48-9f85-40e8-be20-8417ea582e05\">\n<div class=\"image-full-width-wrapper\">\n<div class=\"image-widthsetter\" style=\"max-width:2000px;\">\n<p class=\"vanilla-image-block\" style=\"padding-top:56.20%;\"> <picture data-new-v2-image=\"true\"><source type=\"image\/webp\" srcset=\"https:\/\/cdn.mos.cms.futurecdn.net\/85kAnS2rcuxwyaibPRC4Ze-1200-80.jpg.webp 1200w, https:\/\/cdn.mos.cms.futurecdn.net\/85kAnS2rcuxwyaibPRC4Ze-1024-80.jpg.webp 1024w, https:\/\/cdn.mos.cms.futurecdn.net\/85kAnS2rcuxwyaibPRC4Ze-970-80.jpg.webp 970w, https:\/\/cdn.mos.cms.futurecdn.net\/85kAnS2rcuxwyaibPRC4Ze-650-80.jpg.webp 650w, https:\/\/cdn.mos.cms.futurecdn.net\/85kAnS2rcuxwyaibPRC4Ze-480-80.jpg.webp 480w, https:\/\/cdn.mos.cms.futurecdn.net\/85kAnS2rcuxwyaibPRC4Ze-320-80.jpg.webp 320w\" sizes=\"(min-width: 1000px) 970px, calc(100vw - 40px)\"><\/source><\/picture><\/p>\n<\/div>\n<\/div><figcaption itemprop=\"caption description\" class=\" inline-layout\"><span class=\"caption-text\">Malware is already seeking more victims <\/span><span class=\"credit\" itemprop=\"copyrightHolder\">(Image credit: Shutterstock)<\/span><\/figcaption><\/figure>\n<p id=\"elk-ec1f5204-9f39-4724-9f63-2b20d613414b\">For Kaspersky, CrystalX RAT is designed especially for script kids and newbie hackers, hence the aggressive social and prankware features. However, it has a few advanced tools as well, which seem to be heavily adapted from WebRAT.<\/p>\n<p>That includes a detailed user panel, various customization options, and anti-analytics features. Some of its prominent features include geoblocking, customizable customization, anti-debugging, VM detection, and more.<\/p>\n<p>Right now, it&#8217;s hard to say how many people fell victim to the CrystalX RAT, or how they picked it up in the first place. It&#8217;s possible that a social engineering campaign is being played out, including things like fake software cracks, missing premium services, launchers, and the like. The victims are mostly located in Russia, and according to Leonid Bezvershenko, senior security researcher at Kaspersky GReAT, the RAT is &#8220;already affecting a large number of victims.&#8221;<\/p>\n<p>&#8220;Such a diverse feature set effectively allows 360-degree flattery of the victim and complete loss of privacy. Without access to account details, stolen data can be used for fraud,&#8221; he said. &#8220;We expect the number of victims to increase significantly and the geographical spread to increase in the near future.&#8221;<\/p>\n<hr id=\"elk-29e03ae4-e5a9-4034-bada-b28b84b48186\"\/>\n<div id=\"slice-container-person-oTLPTJmQhVeTR7SngAADoU-reYX4hUPi0Hoje0P9b7u1nSpI2urMlgu\" class=\"slice-container person-wrapper person-oTLPTJmQhVeTR7SngAADoU-reYX4hUPi0Hoje0P9b7u1nSpI2urMlgu slice-container-person\">\n<div class=\"person person--separator\">\n<div class=\"person__avatar-block\">\n<figure class=\"image-wrapped__wrapper\" data-bordeaux-image-check=\"false\">\n<div class=\"image-wrapped__widthsetter\" style=\"max-width:none\">\n<div class=\"image-wrapped__aspect-padding\" style=\"padding-bottom:56.25%\">\n<div style=\"display:contents\"><picture data-hydrate=\"false\"><source class=\"person__avatar image-wrapped__image image__image\" type=\"image\/webp\" srcset=\"https:\/\/cdn.mos.cms.futurecdn.net\/HpHXmtXFPnuzaQ8m9xNW8j-140-80.png.webp 140w\" sizes=\"99vw\" data-normal=\"https:\/\/cdn.mos.cms.futurecdn.net\/HpHXmtXFPnuzaQ8m9xNW8j.png\" data-original-mos=\"https:\/\/cdn.mos.cms.futurecdn.net\/HpHXmtXFPnuzaQ8m9xNW8j.png\" data-pin-media=\"https:\/\/cdn.mos.cms.futurecdn.net\/HpHXmtXFPnuzaQ8m9xNW8j.png\" data-pin-nopin=\"true\" data-slice-image=\"true\"><source class=\"person__avatar image-wrapped__image image__image\" type=\"image\/png\" srcset=\"https:\/\/cdn.mos.cms.futurecdn.net\/HpHXmtXFPnuzaQ8m9xNW8j-140-80.png 140w\" sizes=\"99vw\" data-normal=\"https:\/\/cdn.mos.cms.futurecdn.net\/HpHXmtXFPnuzaQ8m9xNW8j.png\" data-original-mos=\"https:\/\/cdn.mos.cms.futurecdn.net\/HpHXmtXFPnuzaQ8m9xNW8j.png\" data-pin-media=\"https:\/\/cdn.mos.cms.futurecdn.net\/HpHXmtXFPnuzaQ8m9xNW8j.png\" data-pin-nopin=\"true\" data-slice-image=\"true\"><img decoding=\"async\" alt=\"Best antivirus software article\" srcset=\"https:\/\/cdn.mos.cms.futurecdn.net\/HpHXmtXFPnuzaQ8m9xNW8j-140-80.png 140w\" sizes=\"99vw\" class=\"person__avatar image-wrapped__image image__image\" loading=\"lazy\" data-normal=\"https:\/\/cdn.mos.cms.futurecdn.net\/HpHXmtXFPnuzaQ8m9xNW8j.png\" src=\"https:\/\/cdn.mos.cms.futurecdn.net\/HpHXmtXFPnuzaQ8m9xNW8j.png\" data-pin-media=\"https:\/\/cdn.mos.cms.futurecdn.net\/HpHXmtXFPnuzaQ8m9xNW8j.png\" data-pin-nopin=\"true\" data-slice-image=\"true\"\/><\/source><\/source><\/picture><\/div>\n<\/div>\n<\/div>\n<\/figure>\n<\/div>\n<div class=\"person__heading\">\n<p><span class=\"person__name\">The best antivirus for all budgets<\/span><\/p>\n<aside class=\"person__role\">Our top picks, based on real-world testing and comparison<\/aside>\n<\/div>\n<\/div>\n<\/div>\n<hr id=\"elk-27490ee1-7283-43f4-9bfa-2e4fb1e23304\"\/>\n<p id=\"elk-0183118c-7370-4319-8e3f-ae0dedba742c\"><em><strong>Follow TechRadar for Google news<\/strong><\/em>    again<em> <\/em><em><strong>add us as a favorite resource<\/strong><\/em><em>    to get our expert news, reviews, and opinions in your feed. Be sure to click the Follow button!<\/em><\/p>\n<p><em>And of course you can too <\/em><em><strong>follow TechRadar on TikTok<\/strong><\/em><em>    to get news, reviews, unboxings in video form, and get regular updates from us <\/em><em><strong>WhatsApp<\/strong><\/em><em>    again.<\/em><\/p>\n<\/div>\n\n","protected":false},"excerpt":{"rendered":"<p>CrystalX RAT provides advanced remote access and data theft It includes prankware features to attract novice hackers Promoted through Telegram and YouTube subscription campaigns Security researchers warn about a new malware service offered on the dark web, apart from advanced and highly disruptive capabilities, it also enables various and annoying pranks. Cybersecurity experts Kaspersky have [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":3692,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[27],"tags":[],"class_list":{"0":"post-3691","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-smart-home-gadgets"},"_links":{"self":[{"href":"https:\/\/www.wiki-living.com\/index.php\/wp-json\/wp\/v2\/posts\/3691","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.wiki-living.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.wiki-living.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.wiki-living.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.wiki-living.com\/index.php\/wp-json\/wp\/v2\/comments?post=3691"}],"version-history":[{"count":1,"href":"https:\/\/www.wiki-living.com\/index.php\/wp-json\/wp\/v2\/posts\/3691\/revisions"}],"predecessor-version":[{"id":3693,"href":"https:\/\/www.wiki-living.com\/index.php\/wp-json\/wp\/v2\/posts\/3691\/revisions\/3693"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.wiki-living.com\/index.php\/wp-json\/wp\/v2\/media\/3692"}],"wp:attachment":[{"href":"https:\/\/www.wiki-living.com\/index.php\/wp-json\/wp\/v2\/media?parent=3691"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.wiki-living.com\/index.php\/wp-json\/wp\/v2\/categories?post=3691"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.wiki-living.com\/index.php\/wp-json\/wp\/v2\/tags?post=3691"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}