Stay updated with the latest cybersecurity news! This daily roundup covers critical vulnerabilities, emerging threats, and significant data breaches to keep you informed and secure in the ever-evolving digital landscape.
1. WhatsApp Malware ‘Maverick’ Hijacks Browser Sessions to Target Brazil’s Biggest Banks
Published: 2025-11-11
Threat hunters have uncovered similarities between a banking malware called Coyote and a newly disclosed malicious program dubbed Maverick that has been propagated via WhatsApp, targeting Brazilian users and banks with identical functionality to decrypt and monitor banking applications.
2. GootLoader Is Back, Using a New Font Trick to Hide Malware on WordPress Sites
Published: 2025-11-11
The malware known as GootLoader has resurfaced after a brief spike earlier this March, leveraging custom WOFF2 fonts with glyph substitution to obfuscate filenames and exploiting WordPress comment endpoints to deliver XOR-encrypted ZIP payloads.
3. CISO’s Expert Guide To AI Supply Chain Attacks
Published: 2025-11-11
AI-enabled supply chain attacks jumped 156% last year, with malicious package uploads to open-source repositories increasing, and AI-generated malware exhibiting polymorphic, context-aware, and evasive characteristics that extend detection times.
4. Researchers Detect Malicious npm Package Targeting GitHub-Owned Repositories
Published: 2025-11-11
A malicious npm package named “@acitons/artifact” that typosquats the legitimate “@actions/artifact” has been discovered, incorporating a post-install hook to download and run malware with the intent to exfiltrate tokens from GitHub-owned repositories.
5. Android Trojan ‘Fantasy Hub’ Malware Service Turns Telegram Into a Hub for Hackers
Published: 2025-11-11
A new Android remote access trojan called Fantasy Hub, sold on Russian-speaking Telegram channels under a Malware-as-a-Service model, enables device control and espionage by collecting SMS messages, contacts, call logs, images, and intercepting notifications.
6. Hackers Exploiting Triofox Flaw to Install Remote Access Tools via Antivirus Feature
Published: 2025-11-10
Google’s Mandiant Threat Defense discovered n-day exploitation of a patched security flaw in Gladinet’s Triofox platform, tracked as CVE-2025-12480, allowing attackers to bypass authentication and upload arbitrary payloads for remote access.
7. Konni Hackers Turn Google’s Find Hub into a Remote Data-Wiping Weapon
Published: 2025-11-10
The North Korea-affiliated Konni threat actor has been attributed to attacks targeting Android and Windows devices, impersonating counselors to distribute malware and exploiting Google’s Find Hub to remotely reset devices and delete data.
8. Large-Scale ClickFix Phishing Attacks Target Hotel Systems with PureRAT Malware
Published: 2025-11-10
A massive phishing campaign targeting the hospitality industry uses spear-phishing emails impersonating Booking.com to redirect victims to ClickFix-style pages, deploying PureRAT malware to steal credentials and gain unauthorized access to booking platforms.
Stay Vigilant
Cyber threats are evolving rapidly. Subscribe to our newsletter for daily updates, and consider using advanced security tools to monitor your systems for vulnerabilities and automate patches. Stay safe