Cerberus is a malware family that is now discussed in connection with a new ErrTraffic service designed to enable ClickFix attacks through fake browser glitches.
Overview
Cerberus is a malware family that is now discussed in connection with a new ErrTraffic service designed to enable ClickFix attacks through fake browser glitches. This highlights a trend in malware operations leveraging browser-based abuse to monetize and disseminate payloads, expanding attack surfaces and evasion techniques.
Related Threat Clusters
-
CISA Urges Endpoint Security Enhancements After Stryker Cyberattack
On March 11, 2026, medical technology firm Stryker experienced a significant cyberattack attributed to the Iran-linked hacking group Handala. The attack exploited vulnerabilities in Stryker's Microsoft Intune endpoint…
45 articles · Updated March 19, 2026 -
Perseus Android Malware Targets User Notes for Sensitive Data Theft
A new Android malware named Perseus has been identified, actively targeting user notes to extract sensitive information such as passwords and financial data. Distributed via unofficial app stores disguised as IPTV…
8 articles · Updated March 19, 2026 -
Surge in Android Banking Trojans: Four Campaigns Identified
Zimperium's zLabs has reported a significant increase in Android Banking Trojan activity, identifying four distinct campaigns: RecruitRat, SaferRat, Astrinox, and Massiv. These campaigns utilize advanced…
144 articles · Updated April 16, 2026 -
Surge in Android Banking Trojans Threatens Mobile Financial Security
In Q1 2026, Kaspersky reported over 2.67 million mobile attacks, with a significant rise in banking Trojans. The number of unique users targeted remained stable despite a drop in total attacks. Banking Trojan packages…
2 articles · Updated May 21, 2026 -
Cerberus Stalkerware Exploits Google Play for Remote Control of Victims' Devices
Cerberus Anti-theft, a stalkerware application, has been available on Google Play since October 4, 2023, masquerading as a legitimate anti-theft tool. The app utilizes accessibility services and Google Firebase to…
2 articles · Updated May 5, 2026 -
ErrTraffic Tool Automates ClickFix Cyberattacks with Fake Glitches
A new cybercrime tool named ErrTraffic has been introduced, enabling threat actors to automate ClickFix attacks. This tool generates fake browser glitches on compromised websites, tricking users into executing harmful…
4 articles · Updated December 31, 2025
Recent Intelligence Reports
- T1516 — attack.mitre.org · July 8, 2026
- 001 — attack.mitre.org · July 8, 2026
- Q1 2026 Android Threat Landscape: Banking Trojans, Triada.ag Backdoor Surge — Technadu · May 18, 2026
- Cerberus Stalkerware on Google Play Leverages Accessibility Abuse and Firebase for Remote Control — Cybersecuritynews · May 5, 2026
- Cerberus Stalkerware Hits Google Play, Abuses Accessibility and Firebase for Remote Control — Gbhackers · May 5, 2026
- Perseus Android Malware Targets Mobile Banking Users via Fake IPTV Apps — Thecyberexpress · March 20, 2026
- New ‘Perseus’ Android malware checks user notes for secrets — Bleepingcomputer · March 19, 2026
- Perseus: DTO malware that takes notes — Threatfabric · March 19, 2026