New ZeroDayRAT Mobile Spyware Enables Real-Time Surveillance – Threats to BYOD Environments

The Story: ZeroDayRAT Mobile Spyware

The Hacker News reports on ZeroDayRAT, a newly discovered mobile spyware family designed for real-time surveillance and data theft on infected devices. The malware can capture keystrokes, messages, audio, location data, and more, sending it back to attacker-controlled infrastructure.

The campaign appears to target users via malicious apps and potentially sideloaded packages, taking advantage of weak controls around mobile device hygiene.

Why This Matters for Organisations

Many organisations now operate in a BYOD (Bring Your Own Device) or hybrid model where personal mobile devices access corporate email, collaboration tools, and sometimes internal resources.

If a personal device is compromised by spyware like ZeroDayRAT, attackers may gain visibility into:

• Corporate email and messaging content.
• Authentication prompts and MFA push notifications.
• Conversations and meetings held over mobile apps.
• Location and behavioural patterns of key staff.

Recommended Mitigations

• Mobile device management (MDM) and policies: For devices accessing corporate resources, enforce basic posture checks (OS version, screen lock, encryption) and restrict sideloading from unknown sources.
• App hygiene: Encourage users to install apps only from official app stores and review permissions; avoid “cracked” or unofficial clients.
• Conditional access: Use identity and access controls to limit what data and systems are reachable from unmanaged or high-risk devices.
• Awareness: Include mobile spyware and malicious app risks in security awareness training, not just desktop phishing.

Key Takeaways

• ZeroDayRAT illustrates how mobile spyware continues to evolve with strong surveillance capabilities.
• BYOD and mobile-heavy environments must be treated as part of the core attack surface, not an afterthought.
• Combining MDM, conditional access, and user education is essential to reducing the impact of mobile malware campaigns.

Source: Original article: New ZeroDayRAT Mobile Spyware Enables Real-Time Surveillance and Data Theft (The Hacker News)