China-Linked SprySOCKS Backdoor Expands to Windows with Driver-Based Stealth Ravie LakshmananJun 16, 2026Malware / Cyber Espionage Cybersecurity researchers have flagged two previously…
Security researchers at Zimperium's zLabs have identified a new Android banking trojan named Rokarolla, which targets 217 banking and cryptocurrency apps and…
Rokarolla is a new Android banking trojan discovered by Zimperium's zLabs. It targets 217 banking and cryptocurrency apps, uses 137 remote commands,…
HOOK is an Android banking trojan referenced in the Rokarolla report, noted for having 107 remote commands. It is part of the…
A cross-platform information stealer deployed as the final payload in the Mastra supply chain attack. It harvests browser history, steals data from…
easy-day-js is a malicious npm package that cloned the legitimate 'dayjs' date library. Published by user 'sergey2016', it initially appeared clean but…
PromptSnatcher is a data collection operation involving two Chrome ad blocker extensions that capture users' conversations with AI chatbots from platforms like…
CodeGPT AI Assistant is a malicious JetBrains plugin with over 25,000 downloads that poses as an AI coding assistant but exfiltrates AI…
DeepSeek AI Assist is a malicious JetBrains plugin with over 25,000 downloads that poses as an AI coding assistant but exfiltrates AI…
Smart Adblocker is a malicious Chrome extension with 90,000 users that poses as an ad blocker but captures and exfiltrates AI chatbot…