Hackers are now utilizing a new spyware tool called ZeroDayRAT. This dangerous software is designed to hijack smartphones, stealing data and tracking user locations. Both iOS and Android devices are vulnerable, especially with the latest versions of each operating system.
What is ZeroDayRAT?
ZeroDayRAT is a sophisticated mobile spyware platform that allows cybercriminals to gain full access to an infected device. The malware is reportedly sold on the dark web and communicated through platforms like Telegram. It comes with customer support and regular updates, enhancing its functionality for hackers.
Capabilities of ZeroDayRAT
- Steals sensitive information such as login details and cryptocurrency data.
- Tracks locations in real-time via GPS.
- Logs keystrokes and intercepts two-factor authentication codes.
- Activates phone cameras and microphones for surveillance.
- Can scan for cryptocurrency wallet IDs and balances.
Researchers from iVerify first reported the existence of ZeroDayRAT. The malware targets information like device make and model, operating system version, and battery life, which can help hackers tailor their attacks effectively.
How ZeroDayRAT Spreads
ZeroDayRAT infections likely begin with a malicious binary being installed on devices. Hackers can spread this malware through various methods, primarily SMS phishing, also known as “smishing.” Users should be cautious about text messages containing links from unknown senders.
Other Distribution Methods
- Phishing emails.
- Links from fake app stores.
- Messaging platforms like WhatsApp and Telegram.
Protecting Yourself Against ZeroDayRAT
To safeguard against the ZeroDayRAT spyware, it is crucial to avoid clicking on links from unknown sources. Even messages from friends can be risky if their accounts have been compromised.
Best Practices for Cyber Hygiene
- Use top antivirus software on devices to detect malware.
- Regularly update your operating system and apps.
- Be wary of unsolicited messages, emails, or links.
- Consider using antivirus software that provides protection for iOS through a connected Mac.
As of now, major attacks using ZeroDayRAT have not been reported. However, awareness and preventive measures are essential to mitigate the risks of falling prey to this new mobile spyware. By practicing good cyber hygiene and being cautious about online interactions, users can protect themselves against ZeroDayRAT and similar threats.
