PromptSpy: First Android Malware Hijacks Gemini AI for Remote Device Control
𝕏/@GoPlusSecurity •
Revision history
0 recorded changes
Want your article here?
Promote with Leviathan NewsMore on malware
Hackers hide malware in GitHub, npm, and VS Code packages using invisible Unicode so supply‑chain attacks bypass human review and common defenses.
Arstechnica ·
Malicious npm package disguised as OpenClaw AI installer deploys full RAT stealing crypto wallets, macOS Keychain, and cloud credentials
The Hacker News ·
Fake Claude Code install guides lure developers into running Amatera infostealer via malvertised Google Ads
Pushsecurity ·
⚠️ New two‑stage Windows malware campaign “LeakyInjector”/“LeakyStealer,” signed with a valid EV certificate, stealthily injects into explorer.exe to steal data from popular crypto wallets and exfiltrate it to a remote C2.
𝕏/@AckeeBlockchain ·
Akshit (Epoch Protocol) lost over $20k after running a malicious repo linked to the “contagious interview” malware, allegedly tied to DPRK hackers. The code granted root access, leaked env keys, and drained multiple EVM and Solana wallets—highlighting how dev hygiene lapses can be fatal.
𝕏/@OstwalAk ·
North Korean hackers are using fake Zoom and Teams calls to install malware that drains crypto wallets via social engineering. Security researchers say the tactic has already stolen over $300M from victims.
Cryptonews ·
Hackers hide malware in GitHub, npm, and VS Code packages using invisible Unicode so supply‑chain attacks bypass human review and common defenses.
Arstechnica ·
Malicious npm package disguised as OpenClaw AI installer deploys full RAT stealing crypto wallets, macOS Keychain, and cloud credentials
The Hacker News ·
Fake Claude Code install guides lure developers into running Amatera infostealer via malvertised Google Ads
Pushsecurity ·
⚠️ New two‑stage Windows malware campaign “LeakyInjector”/“LeakyStealer,” signed with a valid EV certificate, stealthily injects into explorer.exe to steal data from popular crypto wallets and exfiltrate it to a remote C2.
𝕏/@AckeeBlockchain ·
Akshit (Epoch Protocol) lost over $20k after running a malicious repo linked to the “contagious interview” malware, allegedly tied to DPRK hackers. The code granted root access, leaked env keys, and drained multiple EVM and Solana wallets—highlighting how dev hygiene lapses can be fatal.
𝕏/@OstwalAk ·
North Korean hackers are using fake Zoom and Teams calls to install malware that drains crypto wallets via social engineering. Security researchers say the tactic has already stolen over $300M from victims.
Cryptonews ·