{
  "name": "A laughing RAT: CrystalX combines spyware; stealer; and prankware features",
  "slug": "a-laughing-rat-crystalx-combines-spyware-stealer-and-prankware-features",
  "description": "In March\u202f2026, a new MaaS active campaign was discovered promoting previously unknown malware in private Telegram chats. The Trojan features an extensive arsenal of capabilities. On the panel provided to third\u2011party actors, in addition to the standard features of RAT\u2011like malware, a stealer, keylogger, clipper, and spyware are also available.",
  "published": "2026-04-01T04:24:47+00:00",
  "created_at": "2026-04-01T04:24:47+00:00",
  "modified_at": "2026-04-01T08:24:37+00:00",
  "created_at_opencti": "2026-04-01T04:24:47+00:00",
  "author": "",
  "confidence": null,
  "report_types": [],
  "labels": [],
  "tags": [
    "2026-04-01",
    "crystalx",
    "maas",
    "malware-as-a-service",
    "rat"
  ],
  "related_entities": {
    "malware": [
      {
        "id": "aba1168a-32fb-4c3f-92bf-038f1471b509",
        "name": "CrystalX",
        "slug": "crystalx"
      }
    ],
    "others": [
      {
        "id": "",
        "name": "webcrystal.lol"
      },
      {
        "id": "",
        "name": "webcrystal.sbs"
      },
      {
        "id": "",
        "name": "crystalxrat.top"
      }
    ]
  },
  "external_refs": [
    "https://otx.alienvault.com/pulse/69ccba2f8538ade72d6e71e6",
    "https://securelist.com/crystalx-rat-with-prankware-features/119283/"
  ]
}