CoinLurker, a sophisticated new malware written in Go, targets cryptocurrency users through fake software updates. Using advanced obfuscation and Microsoft Edge Webview2, it exploits various attack vectors including compromised WordPress sites and malvertising to steal crypto wallets, mess...
A sophisticated scam campaign dubbed "Meeten" targets Web3 professionals using fake video conferencing apps to distribute the Realst information stealer. Attackers create AI-enhanced fake companies, initiate contact via Telegram, and direct victims to fraudulent meeting platforms. The malw...
A new Android banking trojan called DroidBot targets 77 financial institutions worldwide through a malware-as-a-service model. Operating since June 2024, it combines VNC and overlay attacks with advanced spyware capabilities, primarily affecting European countries. The malware, distributed...
A sophisticated supply chain attack targeting the npm registry through the malicious @0xengine/xmlrpc package has compromised systems for over a year. The malware steals sensitive data, mines cryptocurrency, and spreads through direct installation and a WordPress tool dependency, affecting...
DroidBot, a new Android banking malware operating as a MaaS platform, targets over 77 cryptocurrency exchanges and banking apps across Europe. Active since June 2024, it features keylogging, fake overlays, SMS interception, and remote control capabilities. With 776 confirmed infections acr...
