Latest Trojan news

Xenomorph Android malware now targets U.S. banks and crypto wallets

Security researchers discovered a new campaign that distributes a new version of the Xenomorph malware to Android users in the United States, Canada, Spain, Italy, Portugal, and Belgium.
- Bill Toulas
- September 25, 2023
- 11:16 AM
- 0
Hackers use open source Merlin post-exploitation toolkit in attacks

Ukraine is warning of a wave of attacks targeting state organizations using 'Merlin,' an open-source post-exploitation and command and control framework.
- Bill Toulas
- August 09, 2023
- 05:32 PM
- 1
npm packages caught serving TurkoRAT binaries that mimic NodeJS

Researchers have discovered multiple npm packages named after NodeJS libraries that even pack a Windows executable that resembles NodeJS but instead drops a sinister trojan.
- Ax Sharma
- May 20, 2023
- 09:06 AM
- 0
New Fleckpe Android malware installed 600K times on Google Play

A new Android subscription malware named 'Fleckpe' has been spotted on Google Play, the official Android app store, disguised as legitimate apps downloaded over 620,000 times.
- Bill Toulas
- May 04, 2023
- 03:12 PM
- 2
Trojanized Tor browsers target Russians with crypto-stealing malware

A surge of trojanized Tor Browser installers targets Russians and Eastern Europeans with clipboard-hijacking malware that steals infected users' cryptocurrency transactions.
- Bill Toulas
- March 28, 2023
- 05:49 PM
- 0
Inaudible ultrasound attack can stealthily control your phone, smart speaker

American university researchers have developed a novel attack which they named "Near-Ultrasound Inaudible Trojan" (NUIT) that can launch silent attacks against devices powered by voice assistants, like smartphones, smart speakers, and other IoTs.
- Bill Toulas
- March 25, 2023
- 11:14 AM
- 2
Hackers steal $8 million from users running trojanized BitKeep apps

Multiple BitKeep crypto wallet users reported that their wallets were emptied during Christmas after hackers triggered transactions that didn't require verification.
- Bill Toulas
- December 27, 2022
- 10:42 AM
- 0
Android malware infected 300,000 devices to steal Facebook accounts

An Android malware campaign masquerading as reading and education apps has been underway since 2018, attempting to steal Facebook account credentials from infected devices.
- Bill Toulas
- December 01, 2022
- 03:52 PM
- 0
Android file manager apps infect thousands with Sharkbot malware

A new collection of malicious Android apps posing as harmless file managers had infiltrated the official Google Play app store, infecting users with the Sharkbot banking trojan.
- Bill Toulas
- November 22, 2022
- 11:04 AM
- 0
Hackers use Microsoft IIS web server logs to control malware

The Cranefly hacking group, aka UNC3524, uses a previously unseen technique of controlling malware on infected devices via Microsoft Internet Information Services (IIS) web server logs.
- Bill Toulas
- October 28, 2022
- 06:00 AM
- 0
Unofficial WhatsApp Android app caught stealing users’ accounts

A new version of an unofficial WhatsApp Android application named 'YoWhatsApp' has been found stealing access keys for users' accounts.
- Bill Toulas
- October 12, 2022
- 02:56 PM
- 0
Live support service hacked to spread malware in supply chain attack

The official installer for the Comm100 Live Chat application, a widely deployed SaaS (software-as-a-service) that businesses use for customer communication and website visitors, was trojanized as part of a new supply-chain attack.
- Bill Toulas
- October 03, 2022
- 01:58 PM
- 0
Lampion malware returns in phishing attacks abusing WeTransfer

The Lampion malware is being distributed in greater volumes lately, with threat actors abusing WeTransfer as part of their phishing campaigns.
- Bill Toulas
- September 09, 2022
- 10:00 AM
- 0
QBot now pushes Black Basta ransomware in bot-powered attacks

The Black Basta ransomware gang has partnered with the QBot malware operation to spread laterally through hacked corporate environments.
- Bill Toulas
- June 06, 2022
- 05:01 PM
- 0
SMSFactory Android malware sneakily subscribes to premium services

Security researchers are warning of an Android malware named SMSFactory that adds unwanted costs to the phone bill by subscribing victims to premium services.
- Bill Toulas
- June 04, 2022
- 10:08 AM
- 0
Top 10 Android banking trojans target apps with 1 billion downloads

The ten most prolific Android mobile banking trojans target 639 financial applications that collectively have over one billion downloads on the Google Play Store.
- Bill Toulas
- June 02, 2022
- 05:09 PM
- 1
New stealthy Nerbian RAT malware spotted in ongoing attacks

A new remote access trojan called Nerbian RAT has been discovered that includes a rich set of features, including the ability to evade detection and analysis by researchers.
- Bill Toulas
- May 11, 2022
- 10:49 AM
- 0
Emotet botnet switches to 64-bit modules, increases activity

The Emotet malware is having a burst in distribution and is likely to soon switch to new payloads that are currently detected by fewer antivirus engines.
- Bill Toulas
- April 19, 2022
- 03:57 PM
- 0
New Android banking malware remotely takes control of your device

A new Android banking malware named Octo has appeared in the wild, featuring remote access capabilities that allow malicious operators to perform on-device fraud.
- Bill Toulas
- April 09, 2022
- 11:02 AM
- 1
New Mustang Panda hacking campaign targets diplomats, ISPs

An ongoing Mustang Panda campaign that has started at least eight months ago has been uncovered by threat analysts who also managed to sample and analyze custom malware loaders and a new Korplug variant.
- Bill Toulas
- March 23, 2022
- 03:13 PM
- 0