Android & iOS Spyware Sold on Telegram: A Serious Threat

KOMPAS.com – Threat spyware is back stalking Android and iOS smartphone users. A platform spyware A new product called ZeroDayRAT has reportedly been traded freely via the Telegram instant messaging application.

Spyware itself is a type of malicious software (malware) which infiltrates mobile devices secretly to monitor user activity, steal personal data, login credentials, and even financial information.

ZeroDayRAT itself is said to have aggressive abilities. According to a security company report iVerify, spyware This allows the perpetrator to fully control the victim’s device remotely.

Also read: Cell phones can be secretly tapped, here’s how to protect your iPhone and Android from spyware

According to iVerify, ZeroDayRAT can attack running devices Android versions 15 to 16, as well as devices iOS up to version 26. After infecting the victim’s device, this spyware will carry out various dangerous actions.

Well, that makes it spyware what stands out is the way it is distributed. ZeroDayRAT is marketed freely through the Telegram platform and is offered complete with support services and software updates.

This means that ZeroDayRAT is present as a platform spyware with structured management. This method is different from attacks spyware others that are generally distributed randomly.

Monitor activity and steal data

iVerify states that ZeroDayRAT’s capabilities are very broad and sophisticated. In fact, the features it brings are said to be similar to spyware previously only found on platforms sponsored by state actors.

ZeroDayRAT is said to be able to collect various device information, such as cellphone model, operating system, battery status, user country, screen lock status, SIM and operator information, and application usage patterns.

Not only that, ZeroDayRAT can also retrieve GPS coordinates, capture notifications from applications and systems, and collect account data such as user names and email addresses.

In a more dangerous scenario, spyware This is called being able to send messages (SMS) and receive verification codes which are usually used to bypass two-factor authentication systems (two–factor authentication/2FA).

Also read: Older iPhone and iPad users must update to prevent Pegasus Spyware

The spyware is also capable of recording keystrokes, including biometric unlocking, gestures, and application opening activities. Access to the camera, microphone and screen recording feature can also be done without the victim’s knowledge.

Even ZeroDayRAT can reportedly record crypto wallet addresses and target banking and digital payment application credentials through attack techniques overlay.

Does not spread automatically

Although dangerous, ZeroDayRAT does not spread automatically. Spyware This only infects the device if the user downloads and installs a malicious file, in the form of an APK file on Android or payload especially on iOS.

These files are generally distributed through techniques phishing, like clicking a link (link) malicious messages sent via email, SMS, or other instant messaging applications. Besides that, spyware can also circulate through fake app stores.

To prevent infection spyware ZeroDayRAT, users are advised not to carelessly click on links in messages sent from unknown numbers. Users should also avoid installing applications from unofficial sources.

For users who have a high risk of being the target of an attack, or who want to add another layer of security, additional protection features can be activated.

On iOS devices, users can take advantage of the feature Lockdown Mode, while on Android the feature is available Advanced Protection, as compiled KompasTekno from Lifehacker.

KOMPAS.com is committed to providing clear, trustworthy and balanced facts. Support the sustainability of clear journalism and enjoy reading comfort without advertising through Membership. Join KOMPAS.com Plus now