Malware

Sophisticated FvncBot Android banking trojan examined Mobile banking users across Poland have been subjected to attacks with the new and highly advanced FvncBot Android banking trojan, according to GBHackers News.

Even though there was a drop in 2024, the pace of ransomware payments accelerated.

Initially discovered in October 2025 by Zimperium's zLabs, ClayRat targeted Russian users by impersonating popular applications like WhatsApp and Google Photos.

A threat group known as GOLD BLADE is evolving its tactics to deploy RedLoader and QWCrypt.

The compromised machine belonged to a malware developer within North Korea’s state-linked cyber operations.

The group targets VMware vCenter environments, gaining initial access through edge devices.

Data from over 400,000 users stolen in a ransomware attack on SonicWall firewall.

More sophisticated Water Saci attack methods uncovered Threat operation Water Saci has exploited WhatsApp to spread HTML Application files and PDFs that facilitate banking trojan compromise in attacks against Brazilian users, according to The Hacker News.