OverlayPhantom: The Android Banking Trojan Hiding in Plain Sight
Executive Summary Cyble Research and Intelligence Labs (CRIL) has identified a novel Android banking trojan, dubbed OverlayPhantom, actively distributed in the
Malware Intelligence
Ransomware campaigns, trojan analysis, botnet takedowns, infostealer tracking, and malware IOC reports from cybersecurity researchers worldwide.
Infostealers Weekly Report: 2026-05-18 – 2026-05-25
InfoStealers Weekly Report – In this comprehensive report, we provide you with valuable insights into the most pressing threats facing organizations today
Infostealers Just Spawned a 5,000+ Repo GitHub Supply Chain Attack
Megalodon: How Infostealers Spawned the 5,000+ Repo GitHub Supply Chain Attack Megalodon: Infostealers Just Spawned a 5,000+ Repo GitHub Supply Chain Attack The
JOMANGY: INJ3CTOR3’s Self-Healing FreePBX Toll Fraud Campaign
Executive Summary Cyble Research & Intelligence Labs (CRIL) has identified an active FreePBX exploitation campaign, with high confidence tied to INJ3CTOR3, an a
Infostealers Weekly Report: 2026-05-11 – 2026-05-18
InfoStealers Weekly Report – In this comprehensive report, we provide you with valuable insights into the most pressing threats facing organizations today
50+ Company Data Breach Spree
The post 50+ Company Data Breach Spree appeared first on InfoStealers .
100+ Companies Ransomware Spree
The post 100+ Companies Ransomware Spree appeared first on InfoStealers .
Nikkei
The post Nikkei appeared first on InfoStealers .
Romania’s Oil Pipeline
The post Romania’s Oil Pipeline appeared first on InfoStealers .
GCC Cyber 2026: How Digital Banking Expansion Is Creating a New Attack Surface Attackers Are Already Exploiting
The Gulf Cooperation Council (GCC) region has spent the last several years building one of the world’s most ambitious digital economies. Across Bahrain, Kuwait,
Operation HumanitarianBait: An Infostealer Campaign in Disguise
Executive Summary Cyble Research and Intelligence Labs (CRIL) has uncovered a targeted cyberespionage campaign leveraging social engineering and trusted infrast
Patch management goes from hard, to ludicrous in the agentic AI era
The release of agentic AI is compressing the nature of patch management and how defenders must prepare for the future of cyber attacks. This is increasing press
One compromise, a thousand victims: why ransomware is turning to supply chain attacks
With an extortion toll running to tens of billions of dollars, few experts would dispute that ransomware is the most consequential cybercrime business model yet
Simplifying MBA obfuscation with CoBRA
Mixed Boolean-Arithmetic (MBA) obfuscation disguises simple operations like x + y behind tangles of arithmetic and bitwise operators. Malware authors and softwa
Under pressure, ransomware returnsto its extortion roots
After years of success, it looks as if the era where ransomware gangs could make easy money from data leak extortion might finally have ended. Despite its huge
Nitrogen Ransomware: ESXi malware has a bug!
Nitrogen ransomware was derived from the previously leaked Conti 2 builder code, and is similar to Nitrogen ransomware, but a coding mistake in the ESXi malware
Ransomware doesn’t need AI when simple weaknesses leave the door standing ajar
After reading recent reports of AI’s impact on cybercrime, one might assume that the world is about to enter an era of frightening, AI-powered ransomware attack
Is Africa the next ransomware hotspot?
Between October and November 2025, one of the biggest cybercrime operations in Interpol history saw the arrest of 574 people suspected of business email comprom
Obscura Ransomware: A Case Study in Ransomware Data Loss
Discover how Obscura ransomware corrupts encrypted files beyond recovery, and why technical validation is key to smart ransom response decisions
Insider Threats Loom while Ransom Payment Rates Plummet
The percentage of companies choosing to pay ransoms dropped significantly, while threat actors shift their tactics in response to decreasing profits.
Get Deeper Malware Intelligence Intelligence
The CyberHawk platform goes far beyond news. Scan indicators, track active campaigns, monitor infostealer feeds, and access a complete analyst toolkit — all free to join.
IOC Scanner — 3.6M+ indicators
Live IOC Feed — filterable threat data
Infostealer Intelligence — live cred logs
Live Threat Map — real-time attacks
MISP Threat Feeds — CIRCL, Feodo, more
GitHub Arsenal — security tools library
Security Blog — deep-dive research
Video Courses — training and education
SOPs — SecOps procedures
Analyst Library — references and toolkits