A North Korean attack group is running a scam operation called the Graphalgo, wherein they use fake job schemes to deliver malware.

A multi-stage malware loader known as OysterLoader has continued to evolve into early 2026, refining its command-and-control (C2) infrastructure and obfuscation methods.

Operation Dream Job is evolving once again, and now comes through malicious dependencies on bare-bones projects.

ZeroDayRAT is a cross-platform mobile spyware sold on Telegram that enables live surveillance, OTP theft, and financial data ...