Fake Android apps push ZloyRAT at Russians amid fuel and drone fears
F6 says three apps, including a police-and-fuel map, steal banking data; download counts and losses were not disclosed.
58
- Mentions · 7d0
- Mentions · 30d1
- All mentions2
- First seenSep 2, 2026
- Last mentioned15d ago
Timeline
2 articles · newest firstNew pro-Ukraine hacker group targets Russian companies with custom ransomware
F6 links new pro-Ukraine ransomware group VantaCore, likely a Thor rebrand, to seven attacks on Russian firms using custom tooling and multimillion-dollar demands.
50
Appears with
- LockBitvendor · 1
- RedWing Stealermalware · 1
- VantaCorethreat actor · 1
- Telegramproduct · 1
- VantaCoreLoadermalware · 1
- VantaCore ransomwaremalware · 1
- SnowKillermalware · 1
- LockBit 3 Blackproduct · 1
- Thorthreat actor · 1
- Babukproduct · 1
- F6vendor · 1
- VantaCoreRATmalware · 1
- ZloyRATmalware · 1
- Androidproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.