Cybersecurity News

Featured

GrayBravo Expands Cybercrime with CastleLoader Malware Across Four Threat Clusters

Cybersecurity firm Recorded Future reports that the GrayBravo threat actor, using CastleLoader malware, operates four distinct activity clusters targeting logistics, booking platforms, and software updates, distributing multiple malware families under a MaaS model.

Featured

Albiriox Malware Hits 400+ Financial Apps, Hijacks Banking and Crypto Accounts Worldwide

A new Android malware called Albiriox is targeting over 400 financial apps worldwide, using advanced on device fraud techniques to hijack real banking and crypto sessions, bypass security measures, and drain user accounts.

North Korean Hackers Deploy 197 npm Packages to Spread Updated OtterCookie Malware

North Korean threat actors continue the Contagious Interview campaign, flooding npm with 197 malicious packages delivering OtterCookie variants. Targeting developers via fake job interviews, the malware steals credentials, clipboard data, crypto wallets, and system info. ClickFake Interview uses Go based GolangGhost malware with decoy apps, exploiting hiring processes for persistent attacks.

Albiriox Malware Exposes a New Era of Android Fraud as a Service

The new Albiriox Android malware, sold as malware as a service, enables full device control, on device fraud, and credential theft using VNC and accessibility abuse. Targeting banking and crypto apps, it spreads through fake app pages and SMS lures. Its rise coincides with similar threats like RadzaRat, expanding Android cybercrime.