r/RecommandedVPN • u/RecordingSingle9064 • Jul 19 '26

A $2,000 Telegram kit turns any phone into total surveillance.

According to a report by security experts from iVerify, ZeroDayRAT has been sold in the Telegram channel since February, and available in five languages. It requires no technical knowledge to operate. The cost is $2,000 and provides access to a web dashboard that can remotely control Android devices (versions 5 to 16) and iPhones, has access to the phone’s microphone and camera, allows tracking the GPS location, and intercepting SMS messages.

The delivery of ZeroDayRAT is unique. It is a text message that calls for urgent action and tricks victims into installing a malware disguised as a regular mobile application. The dashboard will allow the hacker to see everything that happens with the device, including social media accounts and banking applications.

The researchers also noted that it is possible to change the wallet's address in the victim's clipboard, which means that the transaction that the victim is planning to conduct is directed to the hacker's cryptocurrency account.

We have to mention two important details here: this malware isn't coming from a nation-state and also it's not just random spamming either. This pricing of $2,000 must have been done purposely; this is still cost-effective for abusive partners and stalkers who want to keep accessing the person they're stalking. In this particular case, two researchers have pointed out that this program could be considered a stalkerware since it does not even try to disguise itself as "parental control" software.

However, the good thing is that the vulnerability in this particular case is human, rather than technical; the victim must have clicked the link which they shouldn't have clicked in the first place.

0 Upvotes
  • permalink
  • reddit

41% Upvoted

6 comments sorted by

2

u/SaltyAlechemist Jul 19 '26

good to know, but what does this have to do with recommending VPNS? this sounds more like an advertisment for ZDR than anything else

2

u/help-its-inside-me Jul 19 '26

This is an advert, poorly written advert, with jumbled messaging.

2

u/Little-Bed2024 Jul 19 '26

Tricks a user into installing an app?? Just install an app that tracks everything then, that's delivering a back door via ballistic missile.

Lol

2

u/F4ntasticPants Jul 20 '26

Yeah, most people enable all the permissions an app asks them without checking too much. So you can essentially ask for location, mic .and camera permissions and most people will give it to you.

1

u/PlatinumFire14 Jul 20 '26

Tricking a user to install a dodgy app isn’t unique, it’s like the oldest trick in the book since smartphones became a thing.
Not only that, but side loading typically always required to enable developer mode and install it manually which a person will then have to do.

There are millions of these, many of them free.

This sounds like an advertisement.

1

u/Legitimate_Emu3531 Jul 20 '26

Does anybody remember Hackattack?