Fake CVE exploit repos pull frint and skytext packages to steal researcher credentials, with servers still live as of July 1.

Multiple weaponized proof-of-concept (PoC) exploits on GitHub delivered a Python-based remote access trojan (RAT) called ChocoPoC that can execute commands and steal sensitive data. However, ChocoPoC ...

Note: It is expected that you already have a usable desktop experience, i.e., a large enough display (tablet or DEX), a physical keyboard, and optionally a mouse/trackpad. Local Desktop aims to bridge ...

ESET researchers discovered a series of attacks on a governmental organization in Europe using tools capable of targeting air-gapped systems. The campaign, which we attribute to GoldenJackal, a ...

Some people suggested a feature that can modify and repackage APK. In fact, there are many tools that can achieve this, which I think is unnecessary, so I haven't paid attention to it for a long time.