Cerberus Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency
10
occurrences
First Seen
December 30, 2025
Last Seen
July 8, 2026

Cerberus is a malware family tracked across 6 threat clusters and 10 intelligence report mentions on ThreatCluster. First observed December 30, 2025; most recent activity July 8, 2026.

Overview

Cerberus is a malware family that is now discussed in connection with a new ErrTraffic service designed to enable ClickFix attacks through fake browser glitches. This highlights a trend in malware operations leveraging browser-based abuse to monetize and disseminate payloads, expanding attack surfaces and evasion techniques.

Related Threat Clusters

Recent Intelligence Reports

  • T1516 — attack.mitre.org · July 8, 2026
  • 001 — attack.mitre.org · July 8, 2026
  • Q1 2026 Android Threat Landscape: Banking Trojans, Triada.ag Backdoor Surge — Technadu · May 18, 2026
  • Cerberus Stalkerware on Google Play Leverages Accessibility Abuse and Firebase for Remote Control — Cybersecuritynews · May 5, 2026
  • Cerberus Stalkerware Hits Google Play, Abuses Accessibility and Firebase for Remote Control — Gbhackers · May 5, 2026
  • Perseus Android Malware Targets Mobile Banking Users via Fake IPTV Apps — Thecyberexpress · March 20, 2026
  • New ‘Perseus’ Android malware checks user notes for secrets — Bleepingcomputer · March 19, 2026
  • Perseus: DTO malware that takes notes — Threatfabric · March 19, 2026

CVSS v3.1 Breakdown