Malware

Attackers have exploited WhatsApp to compromise Brazilian users with the Astaroth banking trojan as part of the new Boto-Cor-de-Rosa campaign, SiliconANGLE reports.

Chinese threat operations TX-NFC and NFU Pay have been leveraging APKs masquerading as banking and financial apps to spread the NFC-enabled Ghost Tap Android malware that pilfers credit card details in social engineering campaigns that were mostly aimed at Brazil, Italy, Malaysia, Turkey, Uzbekistan, Greece, and Indonesia. , according to GBHackers News.

Increased stealth integrated into flexible pkr_mtsi malware loader Infosecurity Magazine reports that the illicit Windows packer pkr_mtsi, used to deploy the Vidar, Oyster, Vanguard Stealer, and Supper payloads through counterfeit installers of popular utilities, has been upgraded with hashed API resolution, more robust obfuscation, and enhanced anti-analysis mechanisms over the last eight months.

BleepingComputer reports that over 50,000 internet-exposed servers could be compromised in the latest wave of attacks involving the GoBruteforcer botnet, also known as GoBrut, which has been aimed at cryptocurrency and blockchain project databases.

Fake websites promoting widely used software have been leveraged by the Black Cat threat operation to deploy an information-stealing backdoor as part of a new SEO poisoning campaign, which has compromised nearly 277,800 Chinese hosts from Dec. 7 to Dec. 20, according to The Hacker News.

Attempted CloudEyE malware-as-a-service downloader and cryptor infections exceeded 100,000 during the second half of 2025, which is 30 times higher than in the first half of the year, according to GBHackers News.

A persistent and highly sophisticated cyber threat known as GravityRAT continues to evolve, posing a significant multi-platform espionage risk primarily targeting Indian military, government, and defense sectors, GBHackers News reports.

The UAC-0184 group, also known as Hive0156, launched a campaign against Ukraine's Verkhovna Rada, exploiting sensitive themes such as changes to military personnel files and denied compensation for fallen soldiers.