

The findings from security researchers are troubling. Once it’s in your phone, Hermit can take screenshots, record audio and access your contacts, camera, messages, calendar and more.

The victim sees a page asking them to install an application to recover their account. The spyware’s other trick is disguising itself as a messaging application such as Facebook Messenger or WhatsApp. You’re prompted to download a malicious application when you open this link. The malware can disable your data connection and send you a link via text message to recover it. The spyware impersonates legitimate companies, such as ISPs and smartphone manufacturers. RELATED: Bank data breach exposes 1.5 million Social Security numbers How the spyware makes its way into your phone

Lookout Research says the list of targets includes business executives, human rights activists, journalists, academics and government officials. The issue is there’s no limit to who they can watch. Companies like RCS Labs make no secret that their clientele consists of law enforcement agencies using the surveillance software.
