News

A new banking Trojan called Herodotus has emerged in Italy and Brazil, and it brings something we haven't seen before in Android malware: the ability to mimic human typing patterns to fool behavioral analysis systems. ThreatFabric researchers first spotted Herodotus advertised on hacker forums on September 7, 2025,

A new Malware-as-a-Service platform is democratizing sophisticated cyberattacks by offering a feature-rich remote access trojan for just $200 per month, complete with built-in vulnerability scanning capabilities that enable attackers to identify and exploit weaknesses across enterprise networks. Varonis Threat Labs researchers have uncovered Atroposia, a subscription-based malware platform that packages

A sophisticated supply chain attack has compromised the npm ecosystem, with threat actors uploading over 100 malicious packages that exploit an obscure feature to bypass security detection and steal developer credentials. Koi Security researchers have uncovered the PhantomRaven campaign, active since August 2024, which has successfully delivered infostealers through 126

North Korean-linked threat actors are deploying artificial intelligence to enhance cryptocurrency theft operations, using deepfake video calls and AI-generated phishing content to compromise blockchain industry leaders, according to new research from Kaspersky Lab. Kaspersky's Global Research and Analysis Team (GReAT) has identified two interconnected campaigns—GhostCall and GhostHire—

Security researchers have uncovered a serious flaw in OpenAI's ChatGPT desktop application that allows attackers to inject malicious instructions into the AI assistant's persistent memory, potentially leading to account compromise and unauthorized code execution. LayerX security researchers disclosed the vulnerability, which affects the recently released ChatGPT

Cybersecurity researchers have uncovered a sophisticated campaign by the Cloud Atlas threat group targeting Russian enterprises through meticulously crafted phishing emails disguised as legitimate agricultural forum invitations. F6 Security specialists reported a notable surge in Cloud Atlas activity throughout 2025, with the advanced persistent threat (APT) group focusing its efforts