RokRAT – Malware Family Attributed to ScarCruft
RokRAT is a malware family exclusively attributed to the North Korean hacking group ScarCruft (APT37). It has been used in previous campaigns,…
Tag: malware
China-Linked SprySOCKS Backdoor Expands to Windows with Driver-Based Stealth
China-Linked SprySOCKS Backdoor Expands to Windows with Driver-Based Stealth Ravie LakshmananJun 16, 2026Malware / Cyber Espionage Cybersecurity researchers have flagged two previously…
Rokarolla Android Malware Steals PINs, SMS Codes, and Crypto Wallet Funds
Security researchers at Zimperium's zLabs have identified a new Android banking trojan named Rokarolla, which targets 217 banking and cryptocurrency apps and…
Rokarolla Android Banking Trojan
Rokarolla is a new Android banking trojan discovered by Zimperium's zLabs. It targets 217 banking and cryptocurrency apps, uses 137 remote commands,…
HOOK Android Banking Trojan
HOOK is an Android banking trojan referenced in the Rokarolla report, noted for having 107 remote commands. It is part of the…
Cryptocurrency-Stealing Remote Access Trojan Deployed in Mastra Attack
A cross-platform information stealer deployed as the final payload in the Mastra supply chain attack. It harvests browser history, steals data from…
easy-day-js: Malicious npm Package Used in Mastra Supply Chain Attack
easy-day-js is a malicious npm package that cloned the legitimate 'dayjs' date library. Published by user 'sergey2016', it initially appeared clean but…
Malicious JetBrains Plugins Steal AI API Keys; Chrome Extensions Capture Chatbot Chats
Cybersecurity researchers have uncovered a coordinated malware campaign on the JetBrains Marketplace involving 15 malicious plugins that exfiltrate AI provider API keys.…
PromptSnatcher: Chrome Extensions Steal AI Chatbot Conversations
PromptSnatcher is a data collection operation involving two Chrome ad blocker extensions that capture users' conversations with AI chatbots from platforms like…
CodeGPT AI Assistant JetBrains Plugin Steals AI API Keys
CodeGPT AI Assistant is a malicious JetBrains plugin with over 25,000 downloads that poses as an AI coding assistant but exfiltrates AI…