Unknown
A browser extension named 'Poper Blocker' available on the Google Chrome Web Store has been identified as spyware that exfiltrates sensitive user data. Despite reports from researchers warning of its malicious nature, the extension maintained Google's seal of approval and was downloaded by millions of users before being removed.
Security researchers have identified a new Android malware strain, Mantax Otax, that combines ransomware and spyware functionalities. The threat encrypts user files, steals sensitive data, and engages in harassment through spam. The malware is reported to target Android devices globally, with active exploitation observed. No official patch is currently available, and mitigation relies on standard Android security practices.
Researchers have identified 13 malicious Composer theme packages on Packagist designed to inject JavaScript into Vietnamese movie and comic streaming sites. The injected code runs mobile ad-fraud and gambling-redirect operations, and additionally initiates the deployment of spyware against visitors using unpatched iOS devices to steal cryptocurrency wallet seed phrases. The packages were reported in September 2026.
Findings from the Citizen Lab in collaboration with the SHARE Foundation confirm that an iMessage zero-click exploit was used to infect the iPhone of a member of Serbia's student protest movement with NSO Group's Pegasus spyware. The report highlights the use of a zero-click iMessage vulnerability to silently install surveillance software, enabling unauthorized access to private communications and device data.
Apple has sent new threat notifications to users in 110 countries, alerting them that they may be targeted by mercenary spyware attacks. The company stated it has now notified customers in over 150 countries to date, with notifications beginning in late 2021. Apple did not attribute the attacks to specific threat actors or provide technical details about the exploit vectors used.