A dangerous new spyware toolkit called ZeroDayRAT is targeting Android devices and is being sold via Telegram. According to security firm iVerify, the malware works on Android versions from 5.0 Lollipop through Android 16 and gives attackers extensive access to infected devices.
Once a malicious APK is installed, attackers can view device details, installed apps, notifications, SMS messages (including OTP codes) and account data. Even more concerning, ZeroDayRAT enables real-time location tracking, camera and microphone access, screen monitoring and keylogging, as well as clipboard manipulation to potentially reroute cryptocurrency transactions.
Experts warn that tools this powerful once required nation-state resources. While currently distributed on Telegram, the threat will persist even if those channels are removed. Users are strongly advised to avoid installing apps from untrusted sources and stick to the Play Store.
Source: Android Authority
