Fake Next.js job interview tests backdoor developer's devices

Fake Next.js job interview tests backdoor developer's devices

• js job interview tests backdoor developer’s devices February 25, 2026 04:47 PM 0 A coordinated campaign targeting software developers with job-themed lures is using malicious rep

Cybersecurity · February 25, 2026 (updated February 25, 2026) · 1 min · 187 words
Keenadu Firmware Backdoor Infects Android Tablets via Signed OTA Updates

Keenadu Firmware Backdoor Infects Android Tablets via Signed OTA Updates

• Keenadu Firmware Backdoor Infects Android Tablets via Signed OTA Updates A new Android backdoor that’s embedded deep into the device firmware can silently harvest data and remote

Cybersecurity · February 17, 2026 (updated February 24, 2026) · 2 min · 330 words
Divide and conquer: how the new Keenadu backdoor exposed links between major Android botnets

Divide and conquer: how the new Keenadu backdoor exposed links between major Android botnets

• In April 2025, we reported on a then-new iteration of the Triada backdoor that had compromised the firmware of counterfeit Android devices sold across major marketplaces. • The m

Cybersecurity · February 17, 2026 (updated February 25, 2026) · 2 min · 250 words

KONNI Adopts AI to Generate PowerShell Backdoors

• KONNI leverages AI to auto-generate PowerShell backdoor scripts, streamlining malware development. • AI models produce obfuscated code, enhancing stealth against signature-based

Threat Intelligence · January 22, 2026 (updated February 24, 2026) · 1 min · 187 words
The HoneyMyte APT evolves with a kernel-mode rootkit and a ToneShell backdoor

The HoneyMyte APT evolves with a kernel-mode rootkit and a ToneShell backdoor

• Overview of the attacks In mid-2025, we identified a malicious driver file on computer systems in Asia. • The driver file is signed with an old, stolen, or leaked digital certifi

Cybersecurity · December 29, 2025 (updated February 24, 2026) · 2 min · 278 words