Mirax Android RAT Turns Devices into SOCKS5 Proxies, Reaching 220,000 via Meta Ads

Cybersecurity researchers have discovered that the Mirax Android malware has infected over 220,000 devices after being distributed through Meta advertising platforms. The malicious remote access trojan converts infected Android devices into SOCKS5 proxies, which can be used to route internet traffic and potentially hide cybercriminal activities. This case highlights growing concerns about malware distribution through legitimate advertising networks, making it easier for attackers to reach large numbers of potential victims.