Malware & Threats RatHat Android Trojan Uses AI for Automation The malware relies on AI for real-time device navigation and control, increasing adaptability and evasion. Ionut Arghire6 days ago
IoT Security First Malware Built Specifically for Car Head Units Fuels Botnet Kaspersky researchers have linked the malware to the BadBox botnet, which has ensnared millions of devices. Eduard KovacsAugust 25, 2026
Malware & Threats Banking Trojans Manic, Grandoreiro, ToxicPanda 2.0 in the Spotlight The spyware-equipped Manic, a persistent Grandoreiro campaign in Latin America and Europe, and an expanded ToxicPanda 2.0 malware. Eduard KovacsAugust 22, 2026
Malware & Threats Rokarolla Banking Trojan Targets 200 Applications The Android malware allows its operators to take control of infected devices and harvest sensitive information. Eduard KovacsJune 18, 2026
Malware & Threats PromptSpy Android Malware Abuses Gemini AI at Runtime for Persistence The malware leverages Gemini to analyze on-screen elements and ensure that it remains on the device even after a reboot. Eduard KovacsFebruary 20, 2026
Malware & Threats New Keenadu Android Malware Found on Thousands of Devices The malware has been preinstalled on many devices but it has also been distributed through Google Play and other app stores. Eduard KovacsFebruary 18, 2026
Malware & Threats New $150 Cellik RAT Grants Android Control, Trojanizes Google Play Apps The malware provides full device control and real-time surveillance capabilities like those of advanced spyware. Ionut ArghireDecember 17, 2025
Malware & Threats New Albiriox Android Malware Developed by Russian Cybercriminals Albiriox is a banking trojan offered under a malware-as-a-service model for $720 per month. Eduard KovacsDecember 1, 2025
Malware & Threats Landfall Android Spyware Targeted Samsung Phones via Zero-Day Threat actors exploited CVE-2025-21042 to deliver malware via specially crafted images to users in the Middle East. Eduard KovacsNovember 7, 2025
Malware & Threats Anatsa Android Banking Trojan Now Targeting 830 Financial Apps The Anatsa Android banking trojan has expanded its target list to new countries and more cryptocurrency applications. Ionut ArghireAugust 25, 2025
Malware & Threats Iranian APT Targets Android Users With New Variants of DCHSpy Spyware Iranian APT MuddyWater has been using new versions of the DCHSpy Android surveillance tool since the beginning of the conflict with Israel. Ionut ArghireJuly 21, 2025
Malware & Threats Photo-Stealing Spyware Sneaks Into Apple App Store, Google Play Newly discovered spyware has sneaked into Apple’s App Store and Google Play to steal images from users’ mobile devices. Ionut ArghireJune 24, 2025
Malware & Threats Godfather Android Trojan Creates Sandbox on Infected Devices The Godfather Android trojan uses on-device virtualization to hijack legitimate applications and steal users’ funds. Ionut ArghireJune 20, 2025
Malware & Threats ‘Crocodilus’ Android Banking Trojan Allows Device Takeover, Data Theft The newly identified Android banking trojan Crocodilus takes over devices, enabling overlay attacks, remote control, and keylogging. Ionut ArghireMarch 31, 2025
Malware & Threats 300 Malicious ‘Vapor’ Apps Hosted on Google Play Had 60 Million Downloads Over 300 malicious applications displaying intrusive full-screen interstitial video ads amassed more than 60 million downloads on Google Play. Ionut ArghireMarch 20, 2025
Malware & Threats FireScam Android Malware Packs Infostealer, Spyware Capabilities The FireScam Android infostealer monitors app notifications and harvests credentials and financial data and sends it to a Firebase database. Ionut ArghireJanuary 3, 2025
Malware & Threats Android Banking Trojan ToxicPanda Targets Europe ToxicPanda is a China-linked Android banking trojan spotted targeting over a dozen banks in Europe and Latin America. Eduard KovacsNovember 7, 2024
Malware & Threats Russia Targeting Ukrainian Military Recruits With Android, Windows Malware, Google Says Google has uncovered a Russian cyberespionage and influence campaign targeting Ukrainian military recruits. Ionut ArghireOctober 28, 2024