Malware

The attack, detected on Nov. 2, 2025, by Amazon's GuardDuty, utilizes novel persistence techniques to evade detection and hinder response efforts.

The package, named "Tracer.Fody.NLog," was published in February 2020 and remained on the repository with over 2,000 downloads.

Official Turkish government apps have been spoofed to deliver the new Frogblight Android banking trojan, which merges banking credential exfiltration and spyware capabilities, to mobile users across the country, GBHackers News reports.

The campaign, active since November 2025, targets Chinese-speaking users, including those in Western companies operating in China.

Cybersecurity researcher Saurabh identified suspicious code within the React2shell-scanner script, revealing a hidden payload designed to execute mshta.exe and download a secondary malware stage from py-installer.cc.

Cheoh Hai Beng, a 49-year-old Malaysian national, received a five-and-a-half-year prison sentence and a fine of S$3,608 (about $2,700 USD).

The forthcoming infostealer advertised on Telegram offers 14 custom modules.

Threat actors have harnessed malicious ISO files to spread the Phantom Stealer malware against finance, accounting, and payment firms, as well as small and medium-sized enterprises in Russia as part of an advanced phishing campaign, reports Cyber Security News.