A botnet called Brain Food is pushing diet pills via infected WordPress and Joomla websites.

Analysis shows that the malware, previously a banking trojan focused on Android devices, has rapidly evolved just in the past month.

The code is integrated with at least three exploits that target unpatched IoT devices, including closed-circuit cameras and Netgear routers.

A recently discovered malware steals cache data and messaging sessions from the desktop version of encrypted messaging service Telegram.

The Sun Team APT, likely linked to North Korea, uses Google Play and Facebook as attack vectors.

An array of malicious Android apps purporting to be popular game Fortnite are instead harvesting call logs and downloading cryptomining malware.

Threatpost talked to several security researchers about what’s changed in the past year.

Cryptominer WinstarNssmMiner is an aggressive malware strain that has launched 500,000 attacks in the past three days earning criminals $28,000.

The main purpose of Grobios malware is to help attacker establish a strong, persistent foothold in a victim’s system, in order to drop additional payloads later.

Researchers have discovered a set of custom surveillanceware tools being deployed against Android and iOS devices primarily in the Middle East.