Technology ❯ Cybersecurity ❯ Malware
North Korea LATAM Targeting Stargazers Goblin Command-and-Control (C2) Servers Compromised Credentials ChatGPT Browser Extensions BlueNoroff Reverse Tunnel China-linked Threat Actors Living-off-the-land Binaries Nation-State Actors Exploitation Techniques Storm-2460 Mustang Panda UNC6384 Phantom Taurus TA585 Steam Workshop Curly COMrades VPN Security Konni PlushDaemon BlackSanta EDR Killer North Korean Hackers VoidLink Code Execution GrayBravo ScarCruft Pheno Plugin APT37 Hacktivism Campaigns North Korean Threat Actors TA416 Group Ghostwriter Harvester Information Stealing Malware TeamPCP GreyVibe Operation Muck and Load Lurking Lizard Russian Threat Groups UAC-0099 External Attackers GoCaracal AI Misuse North Korean Cyber Operations China-aligned Espionage Groups Unattributed Russian Cybercrime Brazilian Operators
Want to see what podcasts are saying about this topic? Search across 160K+ podcasts. Explore Radar
Group-IB says the malware uses fake Play pages, a local VPN to disable Play Protect, Accessibility abuse, encrypted Telegram channels, and AI-built phishing overlays to harvest PINs, patterns and login data.
