Cyble Uncovers RedHook Android Trojan Targeting Vietnamese Users
Cyble uncovered RedHook, a stealthy Android banking trojan targeting Vietnamese users via phishing sites mimicking trusted financial and government entities.
Tag: CRIL
Scanception Exposed: New QR Code Attack Campaign Exploits Unmonitored Mobile Access
Scanception is a global quishing campaign using QR codes in PDFs to bypass security, harvest credentials, and evade detection on ...
New Cyber Threat Exposed: Advanced Techniques Used to Target German Systems
A cyberattack targeting German entities uses DLL Sideloading, DLL Proxying, and the Sliver implant to bypass security, exploiting phishing emails ...
Key ICS Vulnerabilities Identified in Latest CISA Advisories
CISA issued advisories highlighting critical ICS vulnerabilities in Bosch, Delta, and Beckhoff devices.
Global Cybercrime Syndicate Busted in Singapore in Major Police Operation
Singapore’s police arrested six men believed to be part of a global cybercrime syndicate, including hacking, theft of personal information, ...
New Jellyfish Loader Threat Discovered: Advanced Techniques for System Infiltration
Jellyfish Loader, a new shellcode malware discovered by Cyble Research, showcases its capabilities, C&C communications, and offers cybersecurity advice to ...
Belarusian Government-Linked Threat Actor ‘UNC1151’ Targets Ukraine’s Ministry of Defense
Cyble Research and Intelligence Labs (CRIL) researchers have observed a new sophisticated phishing campaign from the Belarusian government-linked threat actor ...
SideCopy APT Campaign Found Targeting Indian Universities
Since May 2023, the SideCopy campaign has been targeting university students with complex infection chains, utilizing malicious LNK files, HTAs, ...
Researchers Observe Potential Ties between Trinity and Venus Ransomware Strains
Cybersecurity researchers at Cyble's Research and Intelligence Labs (CRIL) have uncovered a new ransomware variant called Trinity, which employs a ...
A Covert Cyberattack: MetaStealer Malware Targets US Asylum Seekers
According to CRIL, the execution flow of the attack involves the initiation of a VPN application using DLL sideloading.
Q1 2026 Threat Reports
❮
❯
