The Hacker News

🚨 TCLBANKER, a previously undocumented Brazilian banking trojan, is targeting 59 banking, fintech, and #cryptocurrency platforms. The malware spreads through #WhatsApp Web and Microsoft Outlook, using DLL side-loading, keylogging, and fake credential overlays to evade detection and steal banking credentials. Read: https://thehackernews.com/2026/05/tclbanker-banking-trojan-targets.html

🚨 28 fraudulent apps on the Google Play Store racked up over 7.3 million downloads before removal. They promised call, SMS, and #WhatsApp histories for any phone number — but delivered only fake data after users paid up to $80. The CallPhantom scam mainly hit #Android users in India and Asia-Pacific. Full read → https://thehackernews.com/2026/05/fake-call-history-apps-stole-payments.html

🛑 WhatsApp alerted ~200 users targeted by a fake iOS app carrying #spyware, mostly in Italy. The attack used social engineering to mimic #WhatsApp. Meta is acting against an Italian firm linked to the spyware. 🔗 Read details here → https://thehackernews.com/2026/04/whatsapp-alerts-200-users-after-fake.html

Russian hackers are targeting #Signal and #WhatsApp accounts of officials, journalists, and military personnel using phishing — not breaking encryption. Attackers pose as Signal support bots or abuse linked-device features to steal verification codes and take over accounts. 🔗Read → https://thehackernews.com/2026/03/threatsday-bulletin-oauth-trap-edr.html#messaging-account-takeover