Researchers at iVerify have identified a new Android remote access trojan dubbed Cellik, which blends the capabilities of full-fledged spyware with the ability to masquerade as legitimate applications from Google Play. The malware is...
The Kimwolf botnet has drawn intense scrutiny after researchers at QiAnXin XLab reported that it had infected more than 1.8 million Android-based devices. The compromised army includes smart TVs, set-top boxes, and tablets, all...
Since early December 2025, SOC teams in Japan have been observing a wave of attacks exploiting React2Shell (CVE-2025-55182)—a remote code execution vulnerability in React/Next.js that already has a public proof of concept and is...
Japanese company Internet Initiative Japan (IIJ) has reported observing a new variant of the malware known as Type 1 Backdoor, which is attributed to the cyber-espionage group DRBControl. Analysis indicates that the attacks employ...
Researchers at Koi Security have identified a new malicious campaign dubbed GhostPoster, targeting users of the Firefox browser. As part of the operation, attackers distributed extensions that appeared harmless and even amassed tens of...
A covert threat has been uncovered within the .NET ecosystem, stemming from the substitution of a widely used tracing library. For more than five years, a malicious package circulated in the NuGet repository, masquerading...
In the run-up to the New Year holidays, underground marketplaces often see a surge of freshly minted data-stealing tools, and this time SantaStealer is being aggressively promoted across Telegram channels and hacker forums. It...
One of the year’s most anticipated films starring Leonardo DiCaprio, Battle After Battle, has yet to reach official online distribution, yet it has already become a lure for malware. Ahead of its release on...
The Unit 42 team at Palo Alto Networks has documented a prolonged and low-visibility campaign targeting government bodies and diplomatic organizations across the Middle East. The activity is attributed to the Ashen Lepus group,...
MangaGamer has issued a warning about a potential supply-chain attack: in the latest print run of the physical edition of Higurashi When They Cry Hou+, the Windows installers on the included USB drive appear...
A new multifunctional Windows trojan dubbed NANOREMOTE leverages a cloud-based file storage service as a covert command-and-control hub, complicating detection while providing attackers with a resilient channel for data exfiltration and the delivery of...
A new Android malware known as Droidlock turns an infected smartphone into a device fully controlled by attackers. The malware locks the screen with a ransom banner, steals application lock codes, and gains access...
