ZeroDayRAT Spyware Kit Enables Full Compromise of Mobile Devices, Raising Security Concerns
A new commercial spyware toolkit named ZeroDayRAT has emerged, allowing for complete remote access to both Android and iOS devices. This toolkit, available through Telegram, was first observed on February 2, 2026, and has been analyzed by iVerify. ZeroDayRAT offers a range of capabilities, including live camera feeds, key logging, and theft of banking and cryptocurrency information. The spyware can be installed on devices through various methods such as phishing links, smishing, and trojanized apps. Once installed, it can profile the victim's device, track location, and provide detailed app usage information. The toolkit also enables live surveillance through camera streaming and microphone feeds, combined with GPS tracking to monitor the target's movements.