spyware news
5 stories
Manic Android Malware Exfiltrates Data From Offline Phones via Nearby Infected Devices
A newly identified Android malware, dubbed Manic, has been observed exfiltrating sensitive data from compromised devices, even when those devices are offline. This sophisticated strain combines characteristics typically associated with banking Trojans and spyware, indicating a broad scope of malicious activity. The malware has been detected targeting users in Ukraine, Russia, and various…

Apple Warns Hundreds of Targeted Mercenary Spyware Attacks
Apple has issued a new round of threat notifications to users in 110 countries, warning them of potential targeting by mercenary spyware. This latest wave of alerts adds to notifications the company has been sending since 2021, which have now reached users in over 150 countries in total.

Android Malware Steals Payment Card Data via NFC
A new Android malware, dubbed WindRelay, has been identified as capable of intercepting live payment card data via Near Field Communication (NFC) and transmitting it to attackers in real time. Discovered by Group-IB researchers, WindRelay operates in conjunction with the SpyNote remote access trojan (RAT), which grants attackers control over a victim's device.

RedWing Android Spyware Sold as a Service on Telegram
Cybersecurity researchers have identified a new Android spyware strain, dubbed RedWing, being distributed as a malware-as-a-service (MaaS) through the Telegram messaging platform. This operation provides criminals with sophisticated tools to hijack mobile devices and steal sensitive banking credentials, even if they possess limited technical expertise. The RedWing MaaS is characterized by…

Telegram-Hosted RedWing Malware Lets Anyone Rent Android Spyware Tools
Researchers have discovered RedWing, an Android spyware operation being sold as a subscription service via Telegram, with suspected ties to Russian threat actors. This sophisticated Malware-as-a-Service (MaaS) product lowers the barrier to entry for novice attackers, providing documentation, tutorial videos, and a bot that customizes and builds malicious applications on demand. The entire…