Major Incidents or Breaches

  • Kaspersky researchers have identified a new Android banking Trojan, dubbed Frogblight, targeting Turkish users. The malware is distributed via a fake app impersonating an official Turkish government portal for accessing court case files.

Newly Discovered Vulnerabilities

  • Wireshark 4.6.2 has been released, addressing two vulnerabilities and five bugs.

Notable Threat Actor Activity

  • The pro-Russian hacktivist group CyberVolk (also known as GLORIAMIST) has launched a new ransomware-as-a-service (RaaS) operation called VolkLocker. The ransomware contains a hard-coded master decryption key, allowing free decryption of files.

Trends, Tools, or Tactics of Interest

  • An email scam is leveraging PayPal’s “Subscriptions” billing feature to send legitimate PayPal emails with fake purchase notifications. The scam embeds fraudulent information in the Customer Service URL field to trick recipients.