The ZeroDayRAT spyware toolkit can let attackers track location, view live camera feeds, and steal baking credentials on Android and iOS.

Researchers said the openly available spyware enables surveillance, credential theft, and financial targeting across a wide range of mobile OS versions.