EUVD-2025-7220

Malicious code in bioql PyPI...

EUVD-2024-35509

Malicious code in bioql PyPI...

EUVD-2022-24980

Malicious code in bioql PyPI...

EUVD-2022-47801

Malicious code in bioql PyPI...

EUVD-2021-7906

Malicious code in bioql PyPI...

EUVD-2025-19636

Malicious code in bioql PyPI...

EUVD-2022-15459

Malicious code in bioql PyPI...

EUVD-2022-35812

Malicious code in bioql PyPI...

EUVD-2025-26652

Malicious code in bioql PyPI...

EUVD-2022-15394

Malicious code in bioql PyPI...

EUVD-2025-23763

Malicious code in bioql PyPI...

EUVD-2025-6118

Malicious code in bioql PyPI...

EUVD-2024-0563

Malicious code in bioql PyPI...

EUVD-2022-30603

Malicious code in bioql PyPI...

EUVD-2024-43317

Malicious code in bioql PyPI...

EUVD-2025-2950

Malicious code in bioql PyPI...

Vane Viper Generates 1 Trillion DNS Queries to Power Global Malware and Ad Fraud Network

The threat actor known as Vane Viper has been outed as a purveyor of malicious ad technology adtech, while relying on a tangled web of shell companies and opaque ownership structures to deliberately evade responsibility. "Vane Viper has provided core infrastructure in widespread malvertising, ad...

224 malicious apps removed from the Google Play Store after ad fraud campaign discovered

Researchers have discovered a large ad fraud campaign on Google Play Store. The Satori Threat Intelligence and Research team found 224 malicious apps which were downloaded over 38 million times and generated up to 2.3 billion ad requests per day. They named the campaign "SlopAds." Ad fraud is a...

SlopAds Fraud Ring Exploits 224 Android Apps to Drive 2.3 Billion Daily Ad Bids

A massive ad fraud and click fraud operation dubbed SlopAds ran a cluster of 224 apps, collectively attracting 38 million downloads across 228 countries and territories. "These apps deliver their fraud payload using steganography and create hidden WebViews to navigate to threat actor-owned cashou...

CVE-2025-10086

A weakness has been identified in fuyanglipengjun platform 1.0.0. This issue affects the function queryAll of the file /adposition/queryAll of the component AdPositionController. This manipulation causes improper authorization. The attack can be initiated remotely. The exploit has been made...