The LightSpy surveillance framework, originally aimed at messaging applications, has improved operational capabilities to infiltrate and extract data from social media databases across Android, iOS, Windows, macOS, and Linux. The malware targets Facebook and Instagram databases, enabling the extraction of private messages, contact lists, and profile metadata, and has a range of cross-platform directives and command capabilities. The malware has transformed into a significant and persistent threat necessitating behavioural rather than static indicators, requiring enhanced detection measures.

200 Malicious GitHub Repos Attacking Developers to Deliver Malware
GitVenom is a sophisticated cyber threat targeting developers through over 200 malicious GitHub repositories that distribute information stealers and RATs while posing as legitimate projects.