Daily briefing · Atom feed
Thursday, May 7, 2026
Stories ranked by how many independent outlets covered them, then by active exploitation.
Top stories
Most covered
TCLBANKER: Brazilian Banking Trojan Spreading via WhatsApp and Outlook
REF3076 uses a trojanized Logitech installer to deploy TCLBANKER, a Brazilian banking trojan with environment-gated payloads, WPF fraud overlays, and self-propagating WhatsApp and Outlook worm modules.
Elastic Security Labs176d agoThreat Intel
Coverage by topic
Stories in this window per security domain.