Do Son The Datzbro Android Trojan is targeting seniors via fake Facebook groups and AI content. The hybrid malware can remotely control devices and steal banking credentials.
spyware
Apple has issued new spyware alerts to French officials, journalists, and activists. These warnings are often tied to highly sophisticated, zero-click attacks.
Apple introduces Memory Integrity Enforcement (MIE) on the iPhone 17 and iPhone Air, an always-on hardware-assisted feature to block memory corruption attacks.
CISA adds two flaws to its KEV Catalog: a TP-Link factory reset flaw and a WhatsApp zero-click vulnerability used in targeted spyware attacks. Patching is urgent.
A new report reveals the Hook Android trojan has evolved into a hybrid threat with ransomware-style overlays, lockscreen bypasses, and stealthy screen-streaming.
New infrastructure linked to Israeli spyware firm Candiru has been uncovered, exposing active surveillance clusters in Hungary and Saudi Arabia, with malware targeting Windows devices.
Hybrid Analysis reveals SHUYAL, a new stealthy infostealer that harvests browser credentials, system data, and screenshots, exfiltrating it all via a Telegram bot.
Four open-source packages on npm and PyPI (56k+ downloads) are secretly deploying sophisticated spyware, performing webcam surveillance, keylogging, and credential theft.
Lookout Threat Lab reveals Massistant, a powerful new mobile forensics app from China's Meiya Pico, used by law enforcement to extract vast user data from seized phones.
A new Android spyware campaign uses a "Wedding Invitation" APK via WhatsApp to install SpyMax RAT, stealing OTPs, contacts, and banking credentials from Indian users.
Hunt.io researchers uncovered dozens of malicious Android apps disguised as popular programs on open servers, which are fronts for SpyNote spyware, harvesting sensitive user data.
CISA adds two actively exploited zero-days to KEV: an iOS zero-click flaw used by spyware (CVE-2025-43200) and a command injection in TP-Link routers
Insikt Group reveals Predator spyware's resurgence, with new infrastructure, obfuscation, and a previously unreported customer in Mozambique, despite sanctions.
Paragon's Graphite mercenary spyware exploited a zero-click iOS flaw (CVE-2025-43200) via iMessage, targeting journalists, confirmed by Citizen Lab
Zanubis, a sophisticated Android malware, exploits Accessibility Services to steal banking data, intercept 2FA codes, and lock devices.
GhostSpy, a sophisticated Android RAT, uses Accessibility Services for full surveillance, data theft (including 2FA), and device control.
Cellebrite's Android zero-day exploit (CVE-2024-53104) used in alleged spyware attempt on activist. Details, technical analysis, and patch info.
The NCSC UK warns of BADBAZAAR and MOONSHINE spyware targeting Uyghur, Tibetan, and Taiwanese individuals. These sophisticated trojans collect sensitive data via fake apps. Learn how to protect your devices.
Stay safe on the Amazon Appstore: Learn how a seemingly innocent BMI calculation app can compromise your privacy.
Sophisticated spyware targeted a prominent German MEP before the European Parliament elections. Learn about the incident and its implications for cybersecurity.
The latest player in this game is sophisticated spyware, employing a series of ingenious obfuscation techniques to bypass static analysis
Two Serbian civil society members were targeted by spyware, highlighting a worrying trend in the misuse of surveillance technology