APT36 is targeting Indian defense personnel with sophisticated phishing, using fake NIC documents and multi-layered malware to steal sensitive data and evade analysis.

Anatsa, an advanced Android banking trojan, is targeting North America via Google Play. It steals credentials and conducts remote fraud through disguised apps and overlay attacks.

Cyble uncovers RedHook, a new Android banking trojan targeting Vietnamese users with sophisticated phishing, remote access, screen capture, and keylogging for full device takeover.

Cyble's CRIL uncovers RedHook, a sophisticated Android banking trojan targeting Vietnamese users with phishing, remote access, keylogging, and screen capture for full device takeover.

The Day I Discovered a Stranger Knew My Bank Details, Instagram Logins, and Private Chats

Hii all!

A new campaign is using Bitcoin wallet lures to distribute DarkComet RAT. The UPX-packed trojan gains persistence via a fake explorer.exe binary and uses keylogging and remote control to steal data.

Reflected XSS is one of those vulnerabilities that developers tend to mentally downgrade almost instantly.

PXA Stealer activity surges in Q1 2026, targeting global finance. Learn how this Python-based malware uses Telegram and LOLBins to hijack crypto and banking data.