Low-Cost Android Phones Ship With Preinstalled Malware That Turns Them Into Residential Proxies

Low-cost Android smartphones have been shipped with malicious software baked into the device firmware, allowing bad actors to covertly install apps, conduct ad fraud, and turn devices into residential proxies. The activity, which targets Android devices built on MediaTek platforms across several...

Midnight Mimosa Malware Found Preinstalled on Low-Cost Android Phones

Low-cost Android phones can arrive already compromised, with malware embedded in their firmware before buyers switch them on...

Astra Linux – Vulnerability in mc

A issue was discovered in Midnight Commander through version 4.8.26. When establishing an SFTP connection, the fingerprint of the server is neither checked nor displayed. As a result, a user can connect to the server without being able to verify its authenticity...

Russian State-Sponsored Hackers Use Claude to Rebuild Malware After Detection

Anthropic on Thursday revealed it disrupted a campaign mounted by a Russian state-sponsored threat actor that abused Claude for developing an AI-assisted workflow to get ahead of the detection curve. The operation has been attributed to a cyber espionage group it calls GTG-20006 where "GTG" stand...

Malicious code in elf-stats-midnight-toy-513 (npm)

Source: amazon-inspector 536e7d3974cf3e3d11ed354bfc2741cfe4ef8e2234df3938e2f2deef4ae5372c The package elf-stats-midnight-toy-513 was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in elf-stats-midnight-workbench-208 (npm)

Source: amazon-inspector 2fb87d70aef0af78e4fb58d3cfac5f8d7bf71cf74223eae262b876fdc627372f The package elf-stats-midnight-workbench-208 was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in elf-stats-midnight-drum-606 (npm)

Source: amazon-inspector 3e8765dce6af0a588611283d53bcba1be9ce0b8ce6b413f490e9c44d79e316fe The package elf-stats-midnight-drum-606 was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in elf-stats-midnight-star-734 (npm)

Source: amazon-inspector 3495ced39f1c44a56b696f57f0f5668a4b0841716e4abdca43cc4cd98246bc46 The package elf-stats-midnight-star-734 was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in elf-stats-midnight-pinecone-982 (npm)

Source: amazon-inspector 691455a549038dff572769ea588aaff022ee3231cff422c02f42512a373040e7 The package elf-stats-midnight-pinecone-982 was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in elf-stats-midnight-wreath-655 (npm)

Source: amazon-inspector 4a72164c47552bdce8ce5c6d780d85e3c3bebda87fef8694e3cfeb7c077d4522 The package elf-stats-midnight-wreath-655 was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in elf-stats-midnight-rocket-813 (npm)

Source: amazon-inspector ff097f7c813e420b8136ad3caa145a545e08d315d7f9125f824b2a3607c4ae88 The package elf-stats-midnight-rocket-813 was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in elf-stats-midnight-mitten-226 (npm)

Source: amazon-inspector 66619bbec59452606be55fc6db9b087c14d1b8a1879aa8d54cacdf24fe64c7e3 The package elf-stats-midnight-mitten-226 was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in elf-stats-midnight-saddlebag-720 (npm)

Source: amazon-inspector 738f7e12a3460319bb92fc9f4034834db18cc52dbabc5b7f1b94a8fc07fcf215 The package elf-stats-midnight-saddlebag-720 was found to contain malicious code. Source: ossf-package-analysis 17612f1c329b1c57903c3c5c973f504da6332745de6e1c61bca69954df9a7cb3 The OpenSSF Package Analysis...

Malicious code in elf-stats-midnight-rocket-499 (npm)

Source: amazon-inspector aedc85815ec471eac6792ca730c4c4fad6ca00bd1a5b00de1ba99e7f8eb4d543 The package elf-stats-midnight-rocket-499 was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in elf-stats-midnight-chimney-291 (npm)

Source: amazon-inspector 3a04cbc30e91721d4dce13c430158798da5f1c9e7769f59d19d644f660799056 The package elf-stats-midnight-chimney-291 was found to contain malicious code. --- Credit: OpenSSF source...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mc (UTSA-2026-093026)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093026 advisory. An issue was discovered in Midnight Commander through 4.8.26. When establishing an SFTP connection, the fingerprint of the server is neither checked nor displayed. A...

Hijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance Malware

A fake browser update served over hijacked hotel Wi-Fi has been used to deliver CornFlake , a remote access trojan RAT that can capture webcam images, microphone audio, and keystrokes, Microsoft said in its latest report. Researchers track the operation as CaptiveCrunch and attribute it to...

CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft

In this article 1. The CaptiveCrunch campaign 2. Storm-2945 and Midnight Blizzard 3. CaptiveCrunch tradecraft and tooling 4. How to protect against CaptiveCrunch activity 5. Microsoft Defender detections and hunting guidance 6. Indicators of compromise Since early May 2026, Microsoft Threat...

CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft

In this article 1. The CaptiveCrunch campaign 2. Storm-2945 and Midnight Blizzard 3. CaptiveCrunch tradecraft and tooling 4. How to protect against CaptiveCrunch activity 5. Microsoft Defender detections and hunting guidance 6. Indicators of compromise Since early May 2026, Microsoft Threat...

4game-support-ckeditor5-custom-build (>=0.0.1, <=0.0.5), 87-midnight-ckeditor5 (>=0.0.3, <=0.0.5) +4605 more potentially affected by CVE-2025-13465 via lodash-es (>=4.0.0, <=4.17.22)

lodash-es NPM version =4.0.0, =0.0.1, =0.0.3, =0.0.1, =0.0.1-alpha.23, =1.0.0, =2.14.1, =41.3.1, =2.1.0, =0.7.0, =1.0.0, =0.1.3, =0.0.4, =0.1.0, =0.0.1-alpha.4, =1.0.1, =1.0.23 and more Source cves: CVE-2025-13465 Source advisory: MEND:CVE-2025-13465...