You didn't click anything. You didn't open a file. And yet—your phone is compromised. 🤔 Watch below. 👇 Stay safe and private online. Malloc 🛡️ #ZeroClick #Malloc #CyberSecurity

🌍RemControl Android banking trojan, tracked by Group-IB as operator UNKK, spreads through fake TVTap IPTV pages and steals credentials across Europe, Canada, and the Gulf 1️⃣RemControl is a newly documented Android malware-as-a-service banking trojan whose infrastructure has been active since at least May 2026 (a command server domain was registered on 12 May) and whose first samples reached public analysis in July 2026 (VirusTotal submissions from 19 July). 2️⃣It is delivered by malvertising to fake Google Play pages that impersonate TVTap, a third-party IPTV app not sold on the official store; at least one Italian campaign used geofencing and mobile User-Agent checks, and the pages carried Meta Pixel tracking identifiers. 3️⃣After install, a dropper starts a local VPN that blocks Google Play services traffic so Play Protect cannot scan in real time - the same technique seen in ToxicPanda - then requests Accessibility Service access and signs a unique certificate per device. 4️⃣With that access it can show full-screen phishing overlays for more than 30 banks in Italy, France, Spain, Poland, Portugal, Canada, and GCC states, steal PINs, codes, card details, and credentials, stream the screen and UI tree, inject taps and text, capture pattern locks on major OEMs, and block removal from settings. 5️⃣Operators pull encrypted command-and-control addresses from Telegram, exposed FastAPI panel documentation confirmed overlay and credential endpoints, and AI-generated text left in overlays and backend notes points to Russian-speaking development; Group-IB links the affiliate tag UNKK only suggestively to the Medusa affiliate UNKN, with no published victim or loss figures. #privacy #cybersecurity #android #ios #mobilesecurity #appsecurity #malware #spyware #malloc #news

The British called it CHOSEN BRICK. The FBI called it HEAVYGRAM. Both names refer to the same tool: a Windows implant that Iranian intelligence has been using to break into the computers of people the regime considers enemies. The targets are predictable. Dissidents. Activists. Journalists. People who fled Iran and thought distance would keep them safe. The methods are not. New piece on how Iran's spyware playbook keeps adapting — from Android implants in 2021 to Windows backdoors in 2026.

Google patched a zero-click flaw in the Pixel's cellular modem (CVE-2026-58704, CVSS 8.0). An attacker nearby can exploit it over the air — already seen in targeted attacks. Your baseband is the one layer you can't firewall. Updated yet? 🔗 Link in comment below

🔐 Android 17 just made carrier tracking way harder: ECH goes OS-wide. Google's Android 17 now encrypts the sites you visit with Encrypted Client Hello — carriers can no longer see which domains your phone connects to. Is your phone protected? 🔗 Link in comment below

🚨 A spyware-grade iPhone exploit kit just leaked on GitHub. DarkSword chains 6 vulnerabilities (4 zero-days) to fully compromise iPhones on iOS 18.4–18.7 — stealing contacts, messages & keychain secrets. Is your iPhone updated? 🔗 Link in comment below

Apple just patched an iOS zero-day (CVE-2026-20700) exploited in 'extremely sophisticated' attacks — a dyld memory bug, commercial spyware vendors suspected. Is your iPhone on iOS 26.3 yet? 🔗 Link in comment below

Your PIN is gone before you even unlock your phone — even when it's offline. 📵 Manic, new Android malware, steals PINs & spies on you, exfiltrating data via nearby phones when yours is offline. 🔗 Link in comment below Is your phone protected against offline threats? 📱

⚠️ 737 fake VPN browser extensions were just caught hijacking traffic — 274 of them posed as NordVPN, Malloc VPN, Proton VPN & ExpressVPN, racking up 75,000+ installs. Fake "VPNs" reroute your browsing through attacker-controlled proxies. Your passwords, your traffic — all visible to them. Real protection shouldn't come from a sketchy browser add-on. When you want a VPN you can actually trust, there's Malloc VPN — built into the app with real-time threat blocking. 🔗 Link in comment below

📱 New Android malware duo: NFC card relay + RAT Fraudsters posing as bank staff trick victims into sideloading the SpyNote RAT, then use new WindRelay NFC malware to relay live card data and take out loans in the victim's name — the whole scam unfolds in a single 13-minute call (Group-IB). 🔗 Link in comment below 🛡️ Stay safe: never sideload APKs from a caller, and if your "bank" calls with an urgent card problem, hang up and call the number on your card's official site.