Researchers have identified a new spyware toolkit called ZeroDayRAT that allows complete remote access to both iOS and Android devices. Available on Telegram, it enables features like live camera feeds, keylogging, and theft of banking information. Infection occurs through malicious binaries, and attackers can use various distribution methods, including phishing and social engineering.

A new variant of spyware called Stealerium automates sextortion by detecting when users browse pornography, capturing screenshots and webcam images to blackmail victims. Researchers at Proofpoint revealed that this malware, available as open-source on GitHub, enhances traditional infostealer functions by adding a layer of privacy invasion and humiliation. The malware has been linked to multiple cybercriminal campaigns since May.