Malicious PDF Reader With 10,000+ Installs on Google Play Delivers Anatsa Banking Trojan
Zscaler found a fake Android PDF reader with 10,000+ Google Play installs acting as dropper for the Anatsa banking trojan, with full IOCs published.
Stories per day · 30 days
3 RSS
5 stories, newest first · one card per story
Stories tagged #dropper
Russian Spies Give 'MatchBoil' Malware a Stealthy Facelift
Cyber-espionage actor UAC-0099 has upgraded its MatchBoil dropper with stealthier capabilities for ongoing campaigns against Ukrainian organizations.
MacSync under the microscope: new delivery methods and a new payload
MacSync, a crypto/info stealer with a backdoor module, was spotted in the wild in September 2026 with new binary payload delivery methods.
Re: CVE-2026-95831: Crypt::SelfCertificate versions from 1.01 through 1.05 for Perl contains malware which executes Python code from an obfuscated URL
CPAN removed Crypt::SelfCertificate 1.01–1.05 after CVE-2026-95831 identified a Python dropper.
The Fractured Block Campaign: CARROTBAT Used to Deliver Malware Targeting Southeast Asia
Unit 42 uncovers the Fractured Block campaign using the CARROTBAT dropper to deliver SYSCON and OceanSalt malware in cryptocurrency-themed attacks across Southeast Asia.