Latest Trojan news

SoumniBot malware exploits Android bugs to evade detection

A new Android banking malware named 'SoumniBot' is using a less common obfuscation approach by exploiting weaknesses in the Android manifest extraction and parsing procedure.
- Bill Toulas
- April 17, 2024
- 05:38 PM
- 0
New proxy malware targets Mac users through pirated software

Cybercriminals are targeting Mac users with a new proxy trojan malware bundled with popular, copyrighted macOS software being offered on warez sites.
- Bill Toulas
- December 03, 2023
- 10:12 AM
- 0
Microsoft Defender no longer flags Tor Browser as malware

For Windows users who frequently use the TorBrowser, there's been a pressing concern. Recent versions of the TorBrowser, specifically because of the tor.exe file it contained, were being flagged as potential threats by Windows Defender.
- Mayank Parmar
- October 02, 2023
- 06:33 PM
- 2
New AtlasCross hackers use American Red Cross as phishing lure

A new APT hacking group named 'AtlasCross' targets organizations with phishing lures impersonating the American Red Cross to deliver backdoor malware.
- Bill Toulas
- September 26, 2023
- 11:35 AM
- 0
Android malware Xenomorph runs new campaign targeting the U.S.

After several months of operational hiatus, Xenomorph Android malware has launched a new campaign that targets users in the United States, Canada, Spain, Italy, Portugal, and Belgium.
- Bill Toulas
- September 25, 2023
- 11:24 AM
- 0
Hackers use open source Merlin post-exploitation toolkit in attacks

Ukraine is warning of a wave of attacks targeting state organizations using 'Merlin,' an open-source post-exploitation and command and control framework.
- Bill Toulas
- August 09, 2023
- 05:32 PM
- 1
npm packages caught serving TurkoRAT binaries that mimic NodeJS

Researchers have discovered multiple npm packages named after NodeJS libraries that even pack a Windows executable that resembles NodeJS but instead drops a sinister trojan.
- Ax Sharma
- May 20, 2023
- 09:06 AM
- 0
New Fleckpe Android malware installed 600K times on Google Play

A new Android subscription malware named 'Fleckpe' has been spotted on Google Play, the official Android app store, disguised as legitimate apps downloaded over 620,000 times.
- Bill Toulas
- May 04, 2023
- 03:12 PM
- 2
Trojanized Tor browsers target Russians with crypto-stealing malware

A surge of trojanized Tor Browser installers targets Russians and Eastern Europeans with clipboard-hijacking malware that steals infected users' cryptocurrency transactions.
- Bill Toulas
- March 28, 2023
- 05:49 PM
- 0
Inaudible ultrasound attack can stealthily control your phone, smart speaker

American university researchers have developed a novel attack which they named "Near-Ultrasound Inaudible Trojan" (NUIT) that can launch silent attacks against devices powered by voice assistants, like smartphones, smart speakers, and other IoTs.
- Bill Toulas
- March 25, 2023
- 11:14 AM
- 2
Hackers steal $8 million from users running trojanized BitKeep apps

Multiple BitKeep crypto wallet users reported that their wallets were emptied during Christmas after hackers triggered transactions that didn't require verification.
- Bill Toulas
- December 27, 2022
- 10:42 AM
- 0
Android malware infected 300,000 devices to steal Facebook accounts

An Android malware campaign masquerading as reading and education apps has been underway since 2018, attempting to steal Facebook account credentials from infected devices.
- Bill Toulas
- December 01, 2022
- 03:52 PM
- 0
Android file manager apps infect thousands with Sharkbot malware

A new collection of malicious Android apps posing as harmless file managers had infiltrated the official Google Play app store, infecting users with the Sharkbot banking trojan.
- Bill Toulas
- November 22, 2022
- 11:04 AM
- 0
Hackers use Microsoft IIS web server logs to control malware

The Cranefly hacking group, aka UNC3524, uses a previously unseen technique of controlling malware on infected devices via Microsoft Internet Information Services (IIS) web server logs.
- Bill Toulas
- October 28, 2022
- 06:00 AM
- 0
Unofficial WhatsApp Android app caught stealing users’ accounts

A new version of an unofficial WhatsApp Android application named 'YoWhatsApp' has been found stealing access keys for users' accounts.
- Bill Toulas
- October 12, 2022
- 02:56 PM
- 0
Live support service hacked to spread malware in supply chain attack

The official installer for the Comm100 Live Chat application, a widely deployed SaaS (software-as-a-service) that businesses use for customer communication and website visitors, was trojanized as part of a new supply-chain attack.
- Bill Toulas
- October 03, 2022
- 01:58 PM
- 0
Lampion malware returns in phishing attacks abusing WeTransfer

The Lampion malware is being distributed in greater volumes lately, with threat actors abusing WeTransfer as part of their phishing campaigns.
- Bill Toulas
- September 09, 2022
- 10:00 AM
- 0
QBot now pushes Black Basta ransomware in bot-powered attacks

The Black Basta ransomware gang has partnered with the QBot malware operation to spread laterally through hacked corporate environments.
- Bill Toulas
- June 06, 2022
- 05:01 PM
- 0
SMSFactory Android malware sneakily subscribes to premium services

Security researchers are warning of an Android malware named SMSFactory that adds unwanted costs to the phone bill by subscribing victims to premium services.
- Bill Toulas
- June 04, 2022
- 10:08 AM
- 0
Top 10 Android banking trojans target apps with 1 billion downloads

The ten most prolific Android mobile banking trojans target 639 financial applications that collectively have over one billion downloads on the Google Play Store.
- Bill Toulas
- June 02, 2022
- 05:09 PM
- 1