logo

Surveillance for Sale: ZeroDayRAT Turns Phones into Spies via Telegram

ID: d16c746d-2bc1-5ccb-a894-f722af746f28

STIX ID: report--d16c746d-2bc1-5ccb-a894-f722af746f28

Feed Name: securityonline.info

Threat Score
75/100

Date Published: 2026-02-16

Date Updated: 2026-04-23

Author: Ddos

...
...

A commercially sold mobile spyware platform named ZeroDayRAT has been observed on Telegram, offering buyers turnkey remote control of Android and iOS devices (including recent OS versions). The toolkit provides live GPS tracking, camera/microphone feeds, screen recording, keystroke capture, and a financial-theft module that can perform clipboard wallet address injection; it is marketed with support and updates, lowering the barrier to effective mobile surveillance and posing significant risks to individuals and organizations.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.