Serbian authorities deployed NoviSpy, a sophisticated Android spyware exploiting multiple Qualcomm zero-day vulnerabilities, to surveil activists, journalists, and protesters. Discovered by Amnesty International, the operation utilized six critical vulnerabilities in Qualcomm's DSP driver,...
Russian FSB exploits Ukrainian minors through deceptive "quest games" for espionage activities in Kharkiv. Two groups of teenagers were detained for gathering intelligence on strategic locations, which was used for coordinating airstrikes. One organizer faces life imprisonment, while a Rus...
A newly discovered PHP backdoor named Glutton, potentially linked to Chinese APT41 group, targets systems across multiple countries including China, US, and others. The malware features comprehensive system control capabilities, including sensitive data harvesting, code injection, and back...
German authorities disrupted the BadBox malware operation affecting over 30,000 Android IoT devices, including digital frames and media players. The malware, found in devices with outdated Android versions, enabled data theft, authentication code interception, and ad fraud. BSI implemented...
A sophisticated Linux rootkit named PUMAKIT has been discovered, featuring advanced stealth capabilities and complex system control mechanisms. The malware uses multiple components including a dropper, memory-resident executables, and both kernel and userland rootkits. It employs privilege...
