Arid Viper disguising mobile spyware as updates for non-malicious Android applications

Kazakhstan-associated YoroTrooper disguises origin of attacks as Azerbaijan

SapphireStealer: Open-source information stealer enables credential and data theft

Lazarus Group exploits ManageEngine vulnerability to deploy QuiteRAT

Lazarus Group exploits ManageEngine vulnerability to deploy QuiteRAT

New threat actor targets Bulgaria, China, Vietnam and other countries with customized Yashma ransomware

Undocumented driver-based browser hijacker RedDriver targets Chinese speakers and internet cafes

Mercenary mayhem: A technical analysis of Intellexa’s PREDATOR spyware

Typhon Reborn V2: Updated stealer features enhanced anti-analysis and evasion capabilities

Talos uncovers espionage campaigns targeting CIS countries, embassies and EU health care agency