DnSpy is a tool tracked across 2 threat clusters and 3 intelligence report mentions on ThreatCluster. First observed May 7, 2026; most recent activity June 4, 2026.
A new banking trojan named TCLBANKER has emerged, targeting 59 Brazilian banking, fintech, and cryptocurrency platforms. Discovered by Elastic Security Labs, the malware utilizes a trojanized MSI installer of Logitech's…
Hackers are impersonating well-known security tools like Ghidra, dnSpy, and SpiderFoot to distribute malware through convincing fake download sites. These sites mimic legitimate project portals, complete with…