RedWing: Android Banking Malware Sold as Telegram Rental Service
RedWing is a new Android malware operation offered as a subscription-based service on Telegram, enabling criminals to steal banking credentials and intercept…
Tag: Telegram
North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets
Threat actors with ties to North Korea have been linked to a fresh set of malicious npm packages that masquerade as Rollup…
Armored Likho Targets Government and Power Sector with BusySnake Stealer
A previously undocumented threat actor, Armored Likho, has been attributed to cyber attacks targeting government agencies and the electric power sector across…
Eagle Werewolf: Threat Cluster Linked to Armored Likho
Eagle Werewolf is a threat cluster tracked by BI.ZONE, active since May 2023, targeting government and defense organizations, especially those involved in…
BusySnake Stealer: Python-Based Infostealer Used by Armored Likho
BusySnake Stealer is a Python-based information stealer targeting Windows systems, used by Armored Likho. It implements evasion techniques like dynamic bytecode decryption…
AquilaRAT: Remote Access Trojan Used by Eagle Werewolf
AquilaRAT is a remote access Trojan used by Eagle Werewolf, distributed via a Rust dropper masquerading as a Starlink device activation checklist…
Check Point Dark Web Monitoring Covers Telegram Channels
Check Point's dark web monitoring capabilities cover Telegram channels, providing visibility into fake tipster services and fraudulent affiliate operations targeting sportsbook brands.
FIFA 2026 Cyber Risk: Pre-Tournament Threat Infrastructure Exposed
Check Point Research has revealed that threat actors pre-built and staged fraud infrastructure targeting the FIFA World Cup 2026 months before the…
Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer
Cybersecurity researchers have uncovered two hijacked npm packages and a cluster of Go packages designed to deploy a Python-based information stealer on…
FBI Warns Russian Intelligence Hackers Target Signal Backup Recovery Keys
The FBI and CISA have updated their March warning about Russian intelligence phishing Signal accounts, adding a new tactic where attackers coax…