MAL-2025-29381 Malicious code in play-url (npm)

The package play-url was found to contain malicious code...

MAL-2025-21720 Malicious code in google-play-card-balance864 (npm)

The package google-play-card-balance864 was found to contain malicious code...

MAL-2025-21719 Malicious code in google-play-card-balance600 (npm)

The package google-play-card-balance600 was found to contain malicious code...

MAL-2025-31849 Malicious code in react-play-action (npm)

The package react-play-action was found to contain malicious code...

MAL-2025-21709 Malicious code in google-play-card-balance162 (npm)

The package google-play-card-balance162 was found to contain malicious code...

MAL-2025-21718 Malicious code in google-play-card-balance482 (npm)

The package google-play-card-balance482 was found to contain malicious code...

MAL-2025-21708 Malicious code in google-play-card-balance097 (npm)

The package google-play-card-balance097 was found to contain malicious code...

MAL-2025-21723 Malicious code in google-play-card-balance999 (npm)

The package google-play-card-balance999 was found to contain malicious code...

MAL-2025-21710 Malicious code in google-play-card-balance164 (npm)

The package google-play-card-balance164 was found to contain malicious code...

MAL-2025-21714 Malicious code in google-play-card-balance275 (npm)

The package google-play-card-balance275 was found to contain malicious code...

MAL-2025-21712 Malicious code in google-play-card-balance241 (npm)

The package google-play-card-balance241 was found to contain malicious code...

MAL-2025-21717 Malicious code in google-play-card-balance452 (npm)

The package google-play-card-balance452 was found to contain malicious code...

MAL-2025-21722 Malicious code in google-play-card-balance994 (npm)

The package google-play-card-balance994 was found to contain malicious code...

New Android Malware Wave Hits Banking via NFC Relay Fraud, Call Hijacking, and Root Exploits

Cybersecurity researchers have disclosed a new Android trojan called PhantomCard that abuses near-field communication NFC to conduct relay attacks for facilitating fraudulent transactions in attacks targeting banking customers in Brazil. "PhantomCard relays NFC data from a victim's banking card t...

Fake VPN and Spam Blocker Apps Tied to VexTrio Used in Ad Fraud, Subscription Scams

The malicious ad tech purveyor known as VexTrio Viper has been observed developing several malicious apps that have been published on Apple and Google's official app storefronts under the guise of seemingly useful applications. These apps masquerade as VPNs, device "monitoring" apps, RAM cleaners...

PlayPraetor Android Trojan Infects 11,000+ Devices via Fake Google Play Pages and Meta Ads

Cybersecurity researchers have discovered a nascent Android remote access trojan RAT called PlayPraetor that has infected more than 11,000 devices, primarily across Portugal, Spain, France, Morocco, Peru, and Hong Kong. "The botnet's rapid growth, which now exceeds 2,000 new infections per week, ...

PlayPraetor Android Trojan Infects 11,000+ Devices via Fake Google Play Pages and Meta Ads

Cybersecurity researchers have discovered a nascent Android remote access trojan RAT called PlayPraetor that has infected more than 11,000 devices, primarily across Portugal, Spain, France, Morocco, Peru, and Hong Kong. "The botnet's rapid growth, which now exceeds 2,000 new infections per week, ...

Android Security Bulletin—August 2025Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2025-08-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...

Q2 2025 Ransomware Trends Analysis: Boom and Bust

“Tumultous times” would be an accurate summary of Q2 2025 where ransomware threat actors are concerned. Rapid7’s internal and publicly-available data analysis reveals a dynamic environment where major players come and go, newer groups work their way up the heavy-hitters ladder, and threat actors...

The vulnerability of the Universal Plug and Play (UPnP) service in Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the Universal Plug and Play UPnP service in Windows operating systems is related to the use of insecure mechanisms for processing authentication data in the operating system’s memory. Exploiting this vulnerability can allow a remote attacker to increase their privileges...