Some of the most important activity on a compromised Android device occurs when a threat attempts to move beyond the normal application sandbox: an unexpected process starts, a shell is opened, or a ...

A recent threat report highlights how attackers are using QR codes and fraudulent AI tools to evade traditional security controls and reach users across devices. Researchers observed campaigns ...

The US Department of Homeland Security (DHS) upped the ante for AI Governance by issuing an order, published in the Federal Register on October 20, 2026, barring the use of DeepSeek Products by US ...

While traditional endpoint security solutions provide cloud-based threat detection and network telemetry, relying on them alone can leave critical blind spots on mobile devices. Employee mobile ...

The zLabs research team has discovered Rokarolla, a newly identified Android banking trojan named after its Command and Control (C2) infrastructure. Primarily distributed through malicious websites ...

Since April 2024, zLabs has identified a growing trend of Android applications misusing NFC and Host Card Emulation (HCE) to illegally obtain payment data and conduct fraudulent transactions. What ...

Unlike traditional spyware that attempts to hide on a device for months, DarkSword is designed for maximum speed and zero footprint. The attack unfolds conceptually in three rapid stages: Within ...

In recent months, Zimperium’s zLabs team has identified a surge in Android Banking Trojan activity, marking a sophisticated shift in the mobile threat landscape. Our researchers successfully tracked ...

The dropper is delivered through fake websites carefully designed to trick unsuspecting users. Our investigation uncovered 3 newly active websites involved in this campaign. Notably, one of the sites ...

The zLabs research team has identified a new threat campaign targeting Spanish Android users. DroidLock, a malware more accurately classified as ransomware, propagates via phishing websites. It has ...