A serious new threat has emerged for Android phone users worldwide. According to a report from Android Authority, a dangerous spyware toolkit called ZeroDayRAT is being actively sold online and poses a significant risk to anyone using an Android device.
The spyware works by tricking people into downloading what appears to be a legitimate app file. Once installed, it gives criminals complete access to your personal information, from your location and banking details to your text messages and even your camera feed.
Security researchers at iVerify discovered the threat and documented how the malicious software can affect Android phones running any version from Android 5 through the latest Android 16. Currently, the toolkit is being distributed through Telegram, though experts warn that even if those channels get shut down, the threat will likely persist as individual attackers continue using it.
What makes this particularly alarming is what the spyware can actually do. Once installed, criminals can see your real-time location, read all your text messages including those with banking codes, access your login information for various accounts, and even watch you through your phone's camera and microphone without your knowledge. They can also see everything you're typing, which means they could potentially capture passwords and banking information.
The spyware can even manipulate your phone's clipboard, the temporary storage where copied information sits. Criminals have used this technique to intercept cryptocurrency transfers and redirect them to their own accounts.
The good news is that this requires deliberate action on your part. You cannot get infected simply by visiting a website or receiving a text message. The only way this malware gets onto your phone is if you actually download and install the malicious file.
That's why the number one defense is simple: be suspicious of any app or file you're asked to download, especially from sources outside the official Google Play Store or from unsolicited links.
Source: Android Authority
