← BREACH ALERTS
MEDIUM2026-04-14via TheHackerNews

🚨 Mirax Android RAT Turns Devices into SOCKS5 Proxies, Reaching 220,000 via Meta Ads Breach — Data Exposed

Mirax Android RAT Turns Devices into SOCKS5 Proxies, Reaching 220,000 via Meta Ads suffered a data breach. Here's what happened, what data was exposed, and what you should do right now.

ACCOUNTS
MEDIUM
SEVERITY
DATA TYPES

What Happened

A nascent Android remote access trojan called Mirax has been observed actively targeting Spanish-speaking countries, with campaigns reaching more than 220,000 accounts on Facebook, Instagram, Messenger, and Threads through advertisements on Meta.

"Mirax integrates advanced Remote Access Trojan (RAT) capabilities, allowing threat actors to fully interact with compromised devices in real

Impact

  • Affected accounts: Under investigation
  • Data exposed: user data
  • Severity: MEDIUM
  • Source: [TheHackerNews](https://thehackernews.com/2026/04/mirax-android-rat-turns-devices-into.html)
  • What You Should Do

    If you have an account with Mirax Android RAT Turns Devices into SOCKS5 Proxies, Reaching 220,000 via Meta Ads, take these steps immediately:

  • **Change your password** — Use a unique, strong password (16+ chars with mixed case, numbers, symbols)
  • **Enable 2FA** — Turn on two-factor authentication if available
  • **Check your email** — Search for breach notifications from Mirax Android RAT Turns Devices into SOCKS5 Proxies, Reaching 220,000 via Meta Ads
  • **Monitor your accounts** — Watch for unauthorized access on any service where you reused the same password
  • **Scan your site** — If you run a website, [run a free ScanMyVibe scan](https://scanmyvibe.co/scan) to check if your own security headers and configurations protect against common attack vectors
  • Is Your Website Secure?

    Data breaches often exploit weak security configurations — missing Content-Security-Policy headers, misconfigured CORS, exposed API keys. These are exactly the issues ScanMyVibe detects in under 30 seconds.

    [Scan your site free →](https://scanmyvibe.co/scan)

    Timeline

  • 2026-04-14 — Breach reported
  • 2026-04-14 — ScanMyVibe breach alert published
  • Ongoing — Investigation in progress

  • This article is auto-generated by ScanMyVibe's breach monitoring system. Sources are verified but details may evolve as investigations progress. Last updated: 2026-04-14.

    IS YOUR SITE NEXT?

    Scan your website for the same vulnerabilities that cause breaches like this one.

    SCAN FREE — 150+ CHECKS