Malware

Fake Xeno Executor installers are targeting Roblox players with malware that provides remote access and steals sensitive information.

The attack is believed to be related to Mini Shai-Hulud.

BTMOB, an Android RAT sold as a malware-as-a-service, has seen its operation splinter into a vast network of resellers, source-code vendors, independent server operators, and potential impersonators, according to Flare researchers.

This new protection, currently in development and planned to be enabled by default, aims to combat malware abuse of Chrome's enterprise policy features on unmanaged consumer devices.

The attack chain begins with a spear-phishing email containing a link to an encrypted archive.

The campaign, identified in May 2026 by Group-IB, uses a modified XMRig miner.

The Flying Eagle framework is being distributed as a fake "公安一网通办" Public Security service application targeting Android users in China.

Italian organizations faced 148 confirmed ransomware attacks in the first half of 2026, with the manufacturing sector being the most frequently targeted.