Malicious Go Crypto Module Steals Passwords and Deploys Rekoobe Backdoor in Developer Environments A newly identified supply chain attack is targeting Go developers, with a malicious module masquerading as a legitimate and widely used cryptographic library. This compromised module, named github[.]com/xinfei_soft/crypto, has been observed to steal developer credentials and silently…

Microsoft Defender has uncovered a sophisticated cyberattack campaign that leverages trojanized gaming utilities to distribute Remote Access Trojans (RATs) and facilitate remote data theft. Attackers are distributing malicious versions of popular gaming tools, such as “Xeno.exe” and “RobloxPlayerBeta.exe,” through browsers and chat platforms, aiming to exploit the trust gamers place…

North Korean APT37 hackers are leveraging novel malware to infect air-gapped systems, marking a significant escalation in cyber warfare capabilities. The sophisticated Ruby Jumper campaign, uncovered by Zscaler ThreatLabz, demonstrates the group’s ability to bypass physical security measures, previously thought to render isolated networks immune to external infection. This development…

A sophisticated Android spyware dubbed ResidentBat has emerged, providing the Belarusian KGB with persistent access to the mobile devices of targeted journalists and civil society members. This advanced state-sponsored malware, first detailed in December 2025, has been under development since at least 2021, suggesting years of covert operation before its…

A sophisticated new cloaking platform, named 1Campaign, is empowering cybercriminals to bypass Google Ads’ screening mechanisms and distribute malicious advertisements. This development poses a significant threat to internet users, increasing their vulnerability to phishing schemes and cryptocurrency theft. Google Ads, a widely trusted online advertising network, relies on stringent screening…

A sophisticated phishing campaign is targeting Zoom users, employing a fake website to trick individuals into downloading surveillance software. In a mere 12 days, this elaborate scheme, detected on February 11, 2026, infected 1,437 Windows users worldwide, turning legitimate workforce monitoring tools into potent spyware. The campaign highlights a growing…

A sophisticated phishing campaign is actively distributing Agent Tesla, a prevalent credential-stealing malware, through a multi-stage attack that largely avoids detection. This insidious method leverages business-themed emails, obfuscated scripts, and in-memory execution to silently pilfer sensitive data from Windows users. The campaign’s effectiveness highlights the significant threat posed by commercially…

A new Steaelite RAT is rapidly emerging as a significant threat to enterprises, combining data theft and ransomware deployment into a single, accessible platform. First observed on underground cybercrime networks in November 2025, this sophisticated malware operates through a browser-based control panel, significantly lowering the technical barrier for threat actors…

A sophisticated new cyber threat campaign, named SeaFlower, has been discovered actively targeting users of popular Web3 cryptocurrency wallets. This previously unreported threat has been embedding stealthy backdoors into cloned versions of legitimate applications, allowing attackers to silently steal seed phrases and drain victims’ digital assets. The SeaFlower campaign is…

The cybersecurity landscape in 2026 is grappling with the escalating threat posed by infostealers, a category of malware increasingly dominating initial access into enterprise networks. Among the most concerning new entrants is DarkCloud infostealer, a commercially available and surprisingly affordable credential-harvesting tool that demonstrates how low-cost malware can inflict significant…

Cybersecurity threats are evolving at an unprecedented pace, with attackers leveraging sophisticated techniques and artificial intelligence to accelerate their operations. This week’s threat landscape reveals a disturbing trend: cybercriminals are executing attacks faster than ever before, with initial access to lateral movement occurring in mere minutes. Staying informed about these…

A new Android Remote Access Trojan (RAT) named Oblivion is posing a significant threat to mobile security. This sophisticated malware, available for as little as $300 per month, allows attackers to gain silent control over Android devices without user awareness. According to Certo analysts, Oblivion targets Android versions 8 through…