With access to SIM, location data, and a preview of recent SMSes, attackers have everything they need for account takeover or targeted social engineering.

DR (DZone Research) offers insights into software development trends, industry surveys, and technology adoption patterns, providing reports, whitepapers, and analyst insights to help businesses make informed decisions and stay competitive in the ever-evolving tech landscape. By exploring DR's curated content, developers can gain insights into emerging technologies, developer preferences, and industry best practices for building innovative and market-leading software solutions. Whether you're a startup founder, product manager, or tech executive, DR offers resources to guide your strategic planning and drive business success.

Dark Reading

ZeroDayRAT is a newly identified mobile spyware family sold openly on Telegram, targeting both Android (versions 5–16) and iOS (up to 26). Priced at $2,000 for full access, it bundles stalkerware-grade capabilities including keylogging, SMS control (enabling MFA bypass), microphone access, screen recording, credential theft, and crypto/bank stealing. Attackers gain a complete device profile — SIM info, location, recent SMS previews, and all registered accounts — without needing technical expertise. Distributed via smishing, phishing, and fake app stores, it poses risks to enterprises with BYOD policies, journalists, activists, and domestic abuse victims. Security researchers describe it as 'textbook stalkerware' that commoditizes capabilities previously reserved for nation-state-level operations.

In Bypassing MFA, ZeroDayRAT Is 'Textbook Stalkerware'

When a ZeroDayRAT Infects a Mobile Device