Apple’s Camera Indicator Lights
A thoughtful review of Apple’s system...
LeakNet ransomware: what you need to know
A ransomware gang that claims to...
CybersecurityFinancial threatsHorabotMalwareMalware descriptionsMalware TechnologiesPonteiroSOC, TI and IR postsSpammer techniquesThe SOC filesTrojanTrojan BankerWindows malware
The SOC Files: Time to “Sapecar”. Unpacking a new Horabot campaign in Mexico
Introduction In this installment of our...
BoletoBrazilCybersecurityDefense evasionDLLFinancial threatsGoogle ChromeGReAT researchInternet BankingMalwareMalware descriptionsMalware TechnologiesMITMPowerShellshellcodeTrojan BankerWhatsAppWindows malware
Free real estate: GoPix, the banking Trojan living off your memory
Introduction GoPix is an advanced persistent...
Smashing Security podcast #458: How not to steal $46 million from the US government
A Wikipedia security engineer accidentally wakes...
BeatBankerBTMOB RATCybersecurityGoogle AndroidGReAT researchMalwareMalware descriptionsMalware TechnologiesMinerMobile MalwareMobile threatsRATTrojanTrojan Banker
BeatBanker: A dual‑mode Android Trojan
Recently, we uncovered BeatBanker, an Android‑based...
Phishing Attacks Against People Seeking Programming Jobs
This is new. North Korean hackers...
Arkanix StealerCybersecurityData theftGReAT researchInfostealersMalwareMalware descriptionsMalware TechnologiesMalware-as-a-ServicePythonTrojanTrojan-stealerUnix and macOS malwareWindows malware
Arkanix Stealer: a C++ & Python infostealer
Introduction In October 2025, we discovered...
AdwareBADBOXBotnetsCybersecurityGoogle AndroidKeenaduMalwareMalware descriptionsMalware TechnologiesMobile MalwareMobile threatsTriadaTrojanTrojan ClickerVo1d
Divide and conquer: how the new Keenadu backdoor exposed links between major Android botnets
In April 2025, we reported on...
The Promptware Kill Chain
Attacks against modern generative artificial intelligence...