Security researchers have discovered a powerful surveillance app first designed for Android devices that can now target iPhones.

Mobile security firm Lookout says the spy app can corrupt Apple-issued enterprise certificates to bypass the iPhone maker’s app store and infect unsuspecting victims.

Once installed, it grabs a victim’s contacts, audio recordings, photos, videos and other device information.

Lookout found the spy app can also be remotely triggered to listen in on people’s conversations.

The malicious app was served from fake sites purporting to be cell carriers in Italy and Turkmenistan.