The Anatsa banking trojan, disguised as a file manager app, amassed over 220,000 downloads on the Google Play Store before being removed. It targets financial institutions by employing fake login overlays and abusing accessibility services to steal credentials. The malware primarily targets users in Europe, exposing over 600 banking apps to unauthorized transactions. Users are advised to enhance app security and avoid sideloading.
400+ SAP NetWeaver Devices Vulnerable to 0-Day Attacks that Exploited in the Wild
Shadow Servers have identified 454 vulnerable SAP NetWeaver systems affected by a critical zero-day flaw, CVE-2025-31324, allowing unauthenticated file uploads and potential system compromise. Discovered
