New ZeroDayRAT Mobile Spyware Enables Real-Time Surveillance and Data Theft

### Executive Summary Researchers disclosed ZeroDayRAT, a commercially sold cross-platform mobile spyware for Android (v5–16) and iOS (up to v26) advertised on Telegram that provides operators with device profiling, GPS/location history, account enumeration, keystroke logging, SMS/OTP theft, live camera/microphone feeds, and modules to hijack crypto and mobile payment transactions; the report also surveys multiple contemporaneous mobile malware and NFC tap-to-pay fraud campaigns and vendor ecosystems enabling wide distribution.