Malware

The group, which allegedly stole over 200 million rubles (approximately $2.6 million), distributed a malicious mobile application through WhatsApp and Telegram, disguised as legitimate banking software.

Threat actors have continued leveraging USB drives to spread the CoinMiner cryptocurrency mining malware as part of an ongoing attack campaign aimed at South Korean workstations, Cyber Security News reports.

Sophisticated FvncBot Android banking trojan examined Mobile banking users across Poland have been subjected to attacks with the new and highly advanced FvncBot Android banking trojan, according to GBHackers News.

Even though there was a drop in 2024, the pace of ransomware payments accelerated.

Initially discovered in October 2025 by Zimperium's zLabs, ClayRat targeted Russian users by impersonating popular applications like WhatsApp and Google Photos.

A threat group known as GOLD BLADE is evolving its tactics to deploy RedLoader and QWCrypt.

The compromised machine belonged to a malware developer within North Korea’s state-linked cyber operations.

The group targets VMware vCenter environments, gaining initial access through edge devices.