The Hacker News

🛑 North Korea-linked hackers spread #malware across five open-source ecosystems. 1,700+ packages on npm, PyPI, Go, Rust, and PHP posed as dev tools but loaded infostealer and RAT malware, hidden inside normal functions, not install. 🔗 Read → https://thehackernews.com/2026/04/n-korean-hackers-spread-1700-malicious.html

⚡ Google adding a 24-hour delay for installing #Android apps from unverified developers. Users must enable developer mode, reboot, and confirm again after a day. This is meant to stop #malware and scams that trick users into disabling Play Protect or giving access. 🔗 Details here → https://thehackernews.com/2026/03/google-adds-24-hour-wait-for-unverified.html

🤖 IBM X-Force found AI-generated #malware Slopoly used by Hive0163. The PowerShell backdoor persists for days, beacons every 30s, and runs commands from a remote C2. AI didn’t make it advanced — it made malware faster to build. 🔗 Read here → https://thehackernews.com/2026/03/hive0163-uses-ai-assisted-slopoly.html

The FBI warns ATM “jackpotting” caused over $20M in losses in 2025. Since 2020, 1,900 incidents have been reported, including 700 last year. Attackers use #malware like Ploutus to bypass bank authorization via the XFS layer & trigger rapid cash-outs. 🔗 Read → https://thehackernews.com/2026/02/fbi-reports-1900-atm-jackpotting.html