Related Threat Clusters
-
Google Chrome Zero-Day Vulnerability CVE-2025-13223 Exploited in the Wild
Google has issued an emergency update to address a high-severity zero-day vulnerability, CVE-2025-13223, in its Chrome browser. This flaw, linked to the V8 JavaScript engine, allows attackers to execute arbitrary code…
54 articles · Updated November 24, 2025 -
Fake Bahrain Civil Defense App Distributes Advanced Surveillance Malware
A malicious Android application masquerading as a Bahrain civil defense alert tool has been identified, targeting users in Bahrain and the Gulf region amid heightened tensions from Iranian missile threats. This app…
9 articles · Updated July 22, 2026 -
Meta Removes Malware Ads Masquerading as Pornography Apps
Meta has taken down numerous ads on Facebook and Instagram that promoted malicious Android applications disguised as pornography apps, following a warning from India's National Cyber Threat Analytics Unit (NCTAU). These…
7 articles · Updated September 1, 2026 -
Oblivion RAT: New Android Malware as a Service Threatens Users and Enterprises
Oblivion RAT is a sophisticated Android remote access trojan (RAT) sold as a Malware-as-a-Service (MaaS) platform. It operates on a subscription model, providing threat actors with tools like a web-based APK builder and…
4 articles · Updated March 21, 2026 -
Cloudflare Flags Russian Messenger MAX as Spyware Amid Security Concerns
Cloudflare has classified the Russian messaging app MAX, associated with the domain max.ru, as spyware due to its potential for covert data collection and transmission. This designation follows reports of unusual…
12 articles · Updated April 30, 2026 -
NoVoice Android Malware Infects 2.3 Million Devices via Google Play Apps
The NoVoice Android malware has been discovered on Google Play, hidden in over 50 apps that have been downloaded more than 2.3 million times. This malware, identified by McAfee, exploits 22 vulnerabilities in older…
6 articles · Updated April 2, 2026 -
SparkKitty Malware Targets Crypto Users via App Stores and Photo Galleries
SparkKitty is a newly identified cross-platform malware that targets cryptocurrency users by scanning photos on both iOS and Android devices for wallet recovery phrases. It spreads through trojanized applications…
15 articles · Updated July 27, 2026 -
Italian Spyware Firm Targets WhatsApp Users with Fake App
WhatsApp has alerted approximately 200 users, primarily in Italy, about a malicious version of its app that contained spyware developed by the Italian firm SIO. The fake app was distributed through deceptive means,…
41 articles · Updated April 1, 2026 -
Gambling Goblin Targets Brazilian Government Sites for SEO Fraud
A Chinese-speaking cybercrime group, dubbed Gambling Goblin, has been targeting Brazilian government and educational institutions since mid-2025. This group is connected to the previously documented Earth Berberoka and…
4 articles · Updated September 2, 2026 -
2026 Smartphone Security Threats: Zero-Click Exploits and Banking Trojans Rise
In May 2026, a critical Android vulnerability (CVE-2026-0073) was disclosed, allowing remote device takeover without user interaction. This flaw, linked to the Android Debug Bridge, affects devices with ADB enabled,…
2 articles · Updated May 23, 2026
Recent Intelligence Reports
- Gambling Goblin Turns Brazilian Government Sites Into SEO Weapons — Infosecurity-Magazine · September 2, 2026
- Malicious Apache Modules Hijack Brazilian Government Site Traffic to Push Betting Pages — Thehackernews · September 2, 2026
- Meta Removes Malware-Laced Porn Ads After India Flags $2.4 Billion Fraud Threat — Finance.Biggo · September 1, 2026
- Fake Indeed apps infecting Android-using job seekers with malware — Cybernews · August 28, 2026
- 53675 — www.kaspersky.com · July 28, 2026
- SparkKitty Malware Found in App Stores Targets Crypto Wallet Seed Phrases — Decrypt.Co · July 27, 2026
- SparkKitty Malware: An Emerging Threat to Mobile Users — Cyberint · July 27, 2026
- SparkKitty malware infiltrates App Store and Google Play to steal crypto seed phrases from photos — Cryptobriefing · July 27, 2026