Malware Development

Obfuscation Techniques Modular Frameworks Trojan Development AI Tools Loader Techniques Malware Distribution Trojan Horses Commercial Spyware Ransomware Development Malware Techniques

3 ARTICLES

last mo.

MacSync Uses Public iCloud Calendars to Deliver Finder‑Disguised macOS Backdoor

Commands hidden in public iCloud calendar DESCRIPTION fields fetch multi-stage droppers that install a Finder-like backdoor designed to steal developer and crypto credentials.

4 ARTICLES

last mo.

Trojanized HandyPay App Steals NFC Card Data and PINs From Android Users in Brazil

3 ARTICLES

7mo ago

Perseus Android Malware Uses IPTV Droppers for Device Takeover, Scans Notes for Secrets

12 ARTICLES

8mo ago

ESET Uncovers PromptSpy, First Android Malware Using Gemini to Stay Persistent

5 ARTICLES

9mo ago

Notepad++ Update Infrastructure Breach Attributed to Lotus Blossom After Targeted Months-Long Campaign

6 ARTICLES

9mo ago

Check Point: Cloud-Focused VoidLink Was Largely AI-Generated by a Single Developer

6 ARTICLES

9mo ago

Check Point Details 'VoidLink,' a Cloud-Focused Linux Malware Framework With Modular Stealth

7 ARTICLES

11mo ago

Albiriox Android Trojan Enables Live Device Takeovers for On‑Device Bank and Crypto Fraud

4 ARTICLES

11mo ago

Researchers Expose Albiriox, an Android MaaS Enabling Live On‑Device Financial Fraud

7 ARTICLES

last yr.

Microsoft Uncovers ‘SesameOp’ Backdoor Using OpenAI Assistants API for Stealthy C2

10 ARTICLES

last yr.

Memento Labs CEO Confirms Dante Spyware Ownership After Chrome Zero-Day Campaign Exposed

4 ARTICLES

last yr.

Google Details COLDRIVER’s New NOROBOT, YESROBOT, MAYBEROBOT Toolset After LOSTKEYS Exposure

7 ARTICLES

last yr.

Unit 42 Names 'Phantom Taurus,' China-Aligned Spy Group Targeting Governments Across Africa, the Middle East and Asia

3 ARTICLES

last yr.

Klopatra Android Banking RAT Hits 3,000 Devices in Spain and Italy

3 ARTICLES

last yr.

VanHelsing Ransomware Expands with Multi-Platform Attacks and $500,000 Demands

5 ARTICLES

last yr.

North Korean Spyware Apps Removed from Google Play After Security Breach

3 ARTICLES

last yr.

First UEFI Bootkit Targeting Linux Discovered

Malware Development

MacSync Uses Public iCloud Calendars to Deliver Finder‑Disguised macOS Backdoor

RatHat Trojan Uses Generative AI to Steal Banking Credentials on Android

RedWing Malware Is Sold as a Telegram Rental Service

Gentlemen RaaS Centralizes EDR-Killers in GentleKiller Suite

Trojanized HandyPay App Steals NFC Card Data and PINs From Android Users in Brazil

Perseus Android Malware Uses IPTV Droppers for Device Takeover, Scans Notes for Secrets

ESET Uncovers PromptSpy, First Android Malware Using Gemini to Stay Persistent

Notepad++ Update Infrastructure Breach Attributed to Lotus Blossom After Targeted Months-Long Campaign

Check Point: Cloud-Focused VoidLink Was Largely AI-Generated by a Single Developer

Check Point Details 'VoidLink,' a Cloud-Focused Linux Malware Framework With Modular Stealth

Never miss stories about

Malware Development

Albiriox Android Trojan Enables Live Device Takeovers for On‑Device Bank and Crypto Fraud

Researchers Expose Albiriox, an Android MaaS Enabling Live On‑Device Financial Fraud

Microsoft Uncovers ‘SesameOp’ Backdoor Using OpenAI Assistants API for Stealthy C2

Memento Labs CEO Confirms Dante Spyware Ownership After Chrome Zero-Day Campaign Exposed

Google Details COLDRIVER’s New NOROBOT, YESROBOT, MAYBEROBOT Toolset After LOSTKEYS Exposure

Unit 42 Names 'Phantom Taurus,' China-Aligned Spy Group Targeting Governments Across Africa, the Middle East and Asia

Klopatra Android Banking RAT Hits 3,000 Devices in Spain and Italy

VanHelsing Ransomware Expands with Multi-Platform Attacks and $500,000 Demands

North Korean Spyware Apps Removed from Google Play After Security Breach

First UEFI Bootkit Targeting Linux Discovered

Never miss stories about

Malware Development