Malloc Privacy Weekly

This is the latest edition of Malloc Privacy Weekly, where we bring you the key cybersecurity updates from around the world, with a focus on mobile security and privacy. This week, we are covering a WhatsApp spyware clone, the Coruna iPhone exploit kit accessible to all cybercriminals, the Telegram critical flaw controversy, Apple prioritizing compliance over user privacy, data breaches from AI apps, novel techniques powering rising scams, and the raging cyber warfare threatening the security of everyone.

An Italian spyware vendor, SIO/Asigint, has created a fake version of the WhatsApp app, targeting approximately 200 users, primarily in Italy, with the intent to install spyware on their devices. WhatsApp has identified this malicious app and has logged out affected users while advising them to uninstall the fake version and reinstall the official app. The attackers employed social engineering techniques to deceive users into downloading this counterfeit application, leading to privacy and security risks.

The Coruna exploit kit has emerged as a significant threat targeting Apple iPhones running iOS versions 13.0 to 17.2.1, revealing a potential link to previous Operation Triangulation attacks. Researchers found that Coruna utilizes an updated kernel exploit first seen in the 2023 campaign alongside 23 other exploits, indicating its advanced capabilities and the evolving threat landscape. The kit supports various attack components tailored for different device architectures, allowing attackers to execute stealthy, full-chain attacks for sensitive data theft. As cyber-espionage techniques have now been repurposed for broader cybercriminal use, millions of users with unpatched devices remain at risk.

To learn more about these developments and other news, read the article below.

Malloc Privacy Weekly

WhatsApp warns users of fake app used to distribute spyware

WhatsApp has recently alerted approximately 200 users that they were misled into downloading a malicious app disguised as its official software, which contained spyware developed by a manufacturer in Italy. The company emphasized that this incident was not due to any vulnerability in the actual WhatsApp application, which maintains strong end-to-end encryption for its users. The affected individuals were primarily located in Italy and were targeted through social engineering tactics. In response, WhatsApp has logged out these users and advised them to remove the fraudulent app, while also attributing the creation of this fake version to SIO, a known entity for similar past activities. This event is part of a growing concern regarding cybersecurity threats that exploit user trust in legitimate applications.

Source: The Record

How Malloc can help? 👉 Malloc App on Android and iOS detects and warns against spyware and malware, blocks phishing and malicious domains, blocks trackers and insecure HTTP traffic, and encrypts and hides user internet traffic through its VPN. It also detects and alerts users to the use of Android accessibility services used by malware and spyware, including banking trojans and other Remote Access Trojans. Always stay connected to Malloc VPN and enable auto-scan for complete protection against threats.

Nation-State Exploit Kits Coruna and DarkSword Now Available to Cybercriminals

A recent cybersecurity crisis highlights that nation-state malware is becoming increasingly accessible, with exploit kits like Coruna and DarkSword now in the hands of cybercriminals, including a Russian state actor group known as UNC6353. Coruna, linked to a previous espionage campaign, employs zero-day vulnerabilities intended for high-level targets, while DarkSword has been leaked onto GitHub, raising alarms for organizations that may not be prepared for such sophisticated threats. As these tools are customized by various threat actors for financial theft and espionage, even organizations that perceive themselves as secure could face unprecedented risks. Experts urge the need for enhanced mobile protection technologies following the detection of these highly effective kits that can infiltrate corporate networks and siphon user credentials swiftly.

Source: Dark Reading

How Malloc can help? 👉 While it’s up to the vendors to patch critical vulnerabilities, and users should keep their devices updated, Malloc can further enhance your security and privacy through its extensive features. Malloc detects and blocks spyware domains in real-time, blocks trackers and insecure HTTP traffic, and also protects against malicious domains and phishing attacks.

Storm Brews Over Critical, No-Click Telegram Flaw

A significant vulnerability has been discovered in the Telegram Messenger app, rated with a critical 9.8 CVSS score, that potentially allows for full system takeovers triggered by corrupted stickers. This flaw, identified as ZDI-CAN-30207, could affect nearly 1 billion users, enabling zero-click attacks that could execute arbitrary code, access private communications, and steal sensitive data without any user interaction. Despite reports from the Trend Micro Zero Day Initiative (ZDI) and advisories from cybersecurity authorities, Telegram denies the existence of this flaw, asserting that all stickers are validated and protected by their servers. With the full disclosure not expected until July, users have been urged to apply all app updates promptly and consider additional security measures to mitigate risk. The incident has sparked considerable concern regarding potential cyber espionage and the overall security of the platform, especially given Telegram’s popularity in private communications and its historical challenges with law enforcement.

Source: Dark Reading

How Malloc can help? 👉 Malloc VPN hides the IP address and encrypts users’ internet traffic in transit, adding tremendous value in terms of user privacy and security when communicating over unsecured networks. Malloc’s on-device VPN also blocks insecure HTTP traffic to thwart potential mercenary spyware infections when connected to suspicious networks. It also blocks spyware domains and detects spyware infections using advanced spyware indicators, alerting users.

Hackers are employing virtual cloud phones to power major scams

Cybercriminals are increasingly leveraging virtual Android “cloud phones” to commit Authorized Push Payment (APP) scams, effectively bypassing modern security measures. A report by Group-IB highlights this emerging threat, describing it as a “sophisticated” approach that allows scammers to mimic real device fingerprints, making it difficult for banks to detect fraud. These cloud phones can evade security by replicating hardware details, IP addresses, and other identifiers used for banking authentication. Criminals are also engaging in practices such as “pre-warming” these devices by creating legitimate transactions to lower security alerts. As the market for these fraud techniques expands, the security community is urged to innovate new strategies to differentiate between authentic and cloud-based devices, particularly by examining installed applications and behavioral anomalies.

Source: Tech Radar

How Malloc can help? 👉 Malloc has anti-phishing protection and blocks all kinds of malware and spyware domains locally using its on-device VPN. It also blocks trackers and insecure HTTP traffic device-wide. Stay connected to Malloc VPN at all times for maximum privacy. Malloc VPN, via its IP address obfuscation and encrypted tunnel, also helps secure user privacy by limiting the user details sent to advertisers.

Sony’s and Paramount’s favourite English app puts 5M users at risk of deepfakes

A critical data leak involving the popular English learning app Abceed has exposed nearly 10TB of user data, including sensitive audio recordings from its 5 million users. This leak, resulting from a misconfigured Google Cloud Storage bucket, raises alarms as these recordings can be exploited by cybercriminals for voice cloning and various phishing attacks. The leaked audio contains not only user pronunciations but also unintentional background noises, enhancing the risk for those affected. Researchers warn that the dataset could facilitate scams such as vishing and sextortion, using cloned voices to manipulate victims. Users are advised to establish “safe phrases,” be cautious with phone calls, and reconsider using voice biometrics for authentication to safeguard against potential threats stemming from this incident. The vulnerability reflects broader concerns about security weaknesses in AI applications, with many found to contain significant security flaws.

Source: Cyber News

How Malloc can help? 👉 Malloc’s Malicious App Scan helps detect malicious and rogue apps, their permission misuse, and trackers, and warns users. Malloc helps remove these apps from the device to protect user privacy. It also comes with a VPN to block trackers and HTTP requests, hide IP locations, and encrypt traffic.

Apple revealed ‘Hide My Email’ user identity in FBI investigation

In a recent case, Apple revealed the true identity behind an anonymized iCloud email address generated by its “Hide My Email” feature during an FBI investigation of a threatening message sent to Alexis Wilkins, the girlfriend of FBI Director Kash Patel. The email, linked to Alden Ruml, contained violent threats and led to his indictment for transmitting a threat. This incident highlighted a significant privacy concern, as Apple’s advertising of the Hide My Email feature as a tool for protecting user anonymity was contradicted by its ability to disclose user identities under legal pressure. While the service offers protection against spam and commercial tracking, the case emphasizes that users seeking strong anonymity should be aware that such features do not guarantee immunity from law enforcement identification.

Source: Cyber Insider

How Malloc can help? 👉 As Apple and Google continue to monopolize the market and collect more and more user data while reducing privacy-friendly alternatives, users need to take steps to secure their devices. Malloc’s on-device system-wide VPN uses local block lists to block trackers and helps reduce first- and third-party data collection by blocking tracking domains. Malloc VPN also helps keep users private and secure by hiding their IP address and encrypting internet traffic in transit. Because Apple and Google cannot be trusted with user data and securing user privacy, trustworthy privacy tools like Malloc help keep users private.

Apple brings in age checks for UK iPhone users

Apple has implemented age checks for iPhone and iPad users in the UK following a recent software update, requiring individuals to verify their age to access 18-plus apps and certain services. Users can confirm their age by providing a credit card or scanning their ID. Those who fail to verify or are underage will have web content filters activated automatically. While the UK regulator Ofcom views this as a positive step for child safety, critics like Silkie Carlo from Big Brother Watch argue that Apple’s actions infringe on users’ freedom to search online. The move reflects ongoing efforts to enhance online safety for minors while raising concerns about privacy and the potential misuse of personal data. Overall, this initiative is part of a broader discourse on keeping young people safe from harmful content online amid evolving regulations.

Source: BBC

How Malloc can help? 👉 Malloc keeps you safe and private online by detecting and blocking spyware, malware, and other malicious domains in real time. It does this using advanced spyware indicators, monitoring your app behavior and data transmission in real time. Stay connected to Malloc VPN at all times for maximum security and set the Android auto-scan feature to perform Malloc’s security scans daily.

Financial Brands Targeted in Global Mobile Banking Malware Surge

A surge in mobile banking malware is threatening 1,243 financial brands across 90 countries, according to a report. Attacks are now primarily originating from user devices, driven by an increase in malicious activity and weak security measures within banking apps. In 2025, there was a 56% increase in Android banking trojan attacks, coinciding with an online fraud rise of 21%. With over 60% of banking apps lacking fundamental code protection, attackers can easily reverse engineer systems and execute sophisticated fraud techniques, enabling them to control devices and operate undetected within legitimate banking sessions. Prominent malware families responsible for these attacks include TsarBot, CopyBara, and Hook, with AI further enhancing attack capabilities. Experts urge financial institutions to prioritize mobile app security, as traditional defenses are no longer adequate against these evolving threats.

Source: Infosecurity Magazine

How Malloc can help? 👉 Malloc’s extensive feature list helps provide complete protection against all kinds of mobile threats. It detects and warns against spyware and malware, blocks phishing and malicious domains, blocks trackers and insecure HTTP traffic, and encrypts and hides user internet traffic through its VPN. Malloc can detect the misuse of Android accessibility services exploited by Android malware and spyware, and alerts users. Always stay connected to Malloc VPN and enable auto-scan for complete protection against threats.

State Actors, Hacktivists, and Criminals Converge in Global Digital Conflict

Rising geopolitical tensions have led to intensified cyber operations, with technology becoming increasingly politicized and serving as both a weapon and a target. The long-standing stability established post-World War II is facing challenges, particularly in Europe, where dependence on U.S. technology and cybersecurity capabilities is being tested. A shift in the threat landscape is observed, where state actors and non-state actors, including hacktivists, collaborate or operate in coordination with geopolitical aims. Recent incidents highlight the growing risks of cyber-physical attacks, with hacktivist groups increasingly targeting critical infrastructure, leading to fears of real-world disruptions. Moreover, the cyber extortion threat continues to expand, spurred by malware commoditization and evolving tactics, suggesting that organizations must adopt a more comprehensive and collaborative approach to cybersecurity that transcends traditional defenses and addresses the societal implications of these cyber threats.

Source: The Hacker News

How Malloc can help? 👉 In these volatile times of rising geopolitical tensions and dangers to user privacy and state sovereignty from hostile states, securing mobile devices from data brokers, spyware, Trojans, and other threats is of utmost priority for both nation-states and individuals. Malloc offers complete protection against all kinds of mobile threats — it blocks spyware connections in real time, thwarts phishing attempts, blocks trackers and insecure HTTP websites, and detects permission misuse by apps. Malloc VPN helps protect your mobile device when connected to unsafe networks, keeping you protected against the ever-increasing number of mobile security threats.