Frogblight, a new Android banking Trojan, is targeting Turkey via smishing with fake e-government apps. It uses WebView to steal credentials and is linked to the Coper MaaS family. It is being actively developed.

Researchers at iVerify have identified a new Android remote access trojan dubbed Cellik, which blends the capabilities of

iVerify exposes Cellik, a $150/mo Android RAT that wraps malicious code inside Play Store apps to grant attackers total device control.

RSF uncovers ResidentBat, a Belarusian KGB spyware physically installed during interrogations to hijack encrypted messages and monitor journalists.

“” is published by David SEHYEON Baek.

Meta has commenced the rollout of a novel WhatsApp feature designed to consolidate a suite of security settings

Urgent: Apple patches zero-day CVE-2026-20700 in dyld. The flaw is being exploited in the wild against specific targets. Update to iOS 26.3 now.

The mobile threat landscape is evolving, a new spyware kit dubbed ZeroDayRAT is sending shockwaves across the cybersecurity community…

Q Continuum finds 287 Chrome extensions spying on 37M users. "Super PiP" & others exfiltrate history via Google Analytics. Check your browser now.

ZeroDayRAT malware targets Android and iOS devices, offering surveillance, tracking, and crypto theft tools via a Telegram-based MaaS service.