TL;DR
- A newly described malware toolkit provides attackers deep access to device and personal information.
- The spyware is being distributed through Telegram and requires Android targets to install a malicious APK.
- Android devices running versions 5 through 16 can be affected.
There’s a nasty new spyware worry about on Android. ZeroDayRAT is a spyware toolkit being distributed through Telegram, allowing deep access to targeted devices without much technical knowledge required.
A report published today by mobile research company iVerify breaks down the ZeroDayRAT threat. According to the report, the exploit is being sold through Telegram, seemingly since last week. It gives bad actors access to a wide variety of sensitive information, and can be leveraged against target devices running Android, from version 5.0 Lollipop all the way to today’s Android 16.