Latest news
Malware
WordPress Sites Turned Into Spy Networks: Malware Hides C2 Commands in Steam Profile Comments Using Unicode Steganography
3 June 2026 dark6
A sophisticated malware campaign has compromised approximately 1,900 WordPress sites using Steam Community profile pages as a covert C2 channel....
Malware
OverlayPhantom Android Banking Trojan Targets 180+ Apps Across 10 Countries
2 June 2026 dark6
A dangerous new Android banking trojan called OverlayPhantom has been targeting users in ten countries, abusing Android's Accessibility Service to...
Malware
DevilNFC: New Android Malware Traps Victims in Kiosk Mode During NFC Card Relay Attacks
21 May 2026 dark6
DevilNFC is a new Android malware that combines NFC relay attacks with Android Kiosk Mode to trap victims inside a...
Scams
CallPhantom: 28 Fake Android Apps with 7.3 Million Downloads Sold Fabricated Call History Data on Google Play
10 May 2026 dark6
Security researchers at ESET uncovered the CallPhantom campaign — 28 fraudulent Android apps on Google Play that accumulated over 7.3...