Google researchers have discovered a Kremlin-backed operation using malware to target potential recruits for the Ukrainian military. The malware, spread primarily via Telegram and a website known as Civil Defense, appears to offer free software for locating military recruiters but instead installs information-stealing software on Windows and Android devices. The operation uses a variant of CraxsRat for Android and a custom version of Pronsis Loader for Windows.

Hackers are selling counterfeit phones with crypto-stealing malware
Kaspersky has identified thousands of low-cost Android smartphones sold online that come with preinstalled malware programmed to steal cryptocurrency details. The devices are infected with