Browsing: malware

There’s a frightening new digital threat that Android users should be aware of. New AI-powered malware called RatHat can automatically gain admin-level control over your Android device, stealing whatever it wants.

Oleksii Oleksiyovych Lytvynenko had, by most accounts, a fairly ordinary legal career in Ukraine before he switched to writing malware. A US federal court sentenced the 44-year-old to four years in prison this week for conspiracy to commit wire fraud, the Justice Department announced, tied to his role in Conti, the ransomware operation blamed for…

Researchers at Group-IB found that the Android banking Trojan Gigabud can create a separate work profile on an infected phone and run a cloned banking app inside it. The attacker can then carry out fraudulent transactions in the new profile, potentially separating them from signs of malware detected elsewhere on the device.

MantaxOtax Android malware has combined file encryption with extensive surveillance, letting attackers steal messages, credentials and device data while restricting access to infected phones.

H1 2026 activity showed a continued adversary preference for abusing legitimate tools, trusted platforms, and routine workflows already present in enterprise and consumer environments. Threat actors used exposed software, developer tools, remote access utilities, payment workflows, and third-party services to gain access, steal credentials, move laterally, and monetize intrusions while blending into expected activity. This…

JSCeal is a cryptocurrency stealer that Check Point Research has tracked since early 2025. Unlike most malware, it hides its code in a format that makes analysis much harder. Check Point presented its latest research at Black Hat USA 2026 and showed how its team built a tool that converts the hidden code into a…

The Weedhack malware campaign represents a significant escalation in the abuse of the Minecraft gaming ecosystem, leveraging advanced Malware-as-a-Service (MaaS) techniques and SEO poisoning to propagate infostealer and remote access trojan (RAT) payloads. Since early 2026, threat actors have distributed Weedhack via counterfeit Minecraft client and mod websites, as well as through poisoned search engine results, Discord,…

Maybe you’ve heard about this little video game coming out soon called Grand Theft Auto VI. Well, while most people are waiting to get their hands on it, one enterprising group, CyberLeek, claims to have a copy and has been posting images and videos from it, prompting Rockstar Games to file copyright takedowns to stem…

Researchers at Group-IB have discovered a new NFC relay malware family, purpose-built to capture live card data “WindRelay.”

Since October 2025, cybercriminals have been actively exploiting the webhook functionality of the n8n workflow automation platform to deliver malware and conduct advanced phishing campaigns. By leveraging the trusted cloud infrastructure of n8n, attackers have been able to bypass traditional email security controls, automate malicious payload delivery, and perform device fingerprinting on victims. This abuse…