New Spyware ‘ZeroDayRAT’ Grants Near-Total Control of iPhones and Android Devices

A newly discovered spyware platform, dubbed ZeroDayRAT, poses a notable threat to mobile device security, affecting both iOS and Android systems. Security firm iVerify has uncovered the sophisticated malware, which is capable of granting attackers near-total control over compromised smartphones, even those running the latest operating system versions.

How ZeroDayRAT Works

ZeroDayRAT distinguishes itself through its ability to operate across both major mobile platforms. Unlike some spyware that targets only one operating system, this RAT (Remote Access Trojan) can compromise both iPhones and Android devices. iVerify’s research indicates the spyware exploits previously unknown vulnerabilities – zero-day exploits – to gain access and control.

Capabilities of the Spyware

Once installed,ZeroDayRAT provides attackers with a wide range of capabilities,including:

• Real-time Data Access: The spyware can access sensitive data stored on the device,such as contacts,messages,photos,and location data.
• Remote Control: Attackers can remotely control various device functions, including the camera, microphone, and screen.
• Keylogging: ZeroDayRAT can record keystrokes,potentially capturing passwords,usernames,and other confidential information.
• Call Interception: The malware can intercept phone calls, allowing attackers to listen to conversations in real-time.
• File System Access: attackers gain access to the device’s file system, enabling them to steal or modify files.

Targeting and Distribution

While the specific targeting criteria for ZeroDayRAT remain unclear, security experts believe it is likely being used in targeted attacks against individuals of interest, rather than widespread distribution. The method of distribution is also still under examination, but potential vectors include phishing attacks, malicious links, and compromised apps.

Protecting Yourself from ZeroDayRAT

Protecting your mobile device from spyware requires a multi-layered approach:

• Keep Your software Updated: Regularly update your operating system and apps to patch security vulnerabilities.
• Be Cautious of links and Attachments: Avoid clicking on suspicious links or opening attachments from unknown senders.
• Install a mobile Security App: Consider using a reputable mobile security app that can detect and remove malware.
• Enable Two-Factor Authentication: Enable two-factor authentication on your critically important accounts to add an extra layer of security.
• Review App Permissions: Regularly review the permissions granted to apps on your device and revoke any unneeded access.

Ongoing Investigation

iVerify continues to investigate zerodayrat to understand its full capabilities and identify its operators.As more information becomes available, security professionals will refine their recommendations for protecting against this evolving threat.Users should remain vigilant and practice safe mobile habits to minimize their risk of infection.