A Casbaneiro banking trojan campaign in August 2026 that targeted Latin American users via phishing emails and malicious PDFs disguised as invoices and legal notices. Its defining feature is conditional command-and-control activation: the malware initiates banking-related C2 communication only when victims visit targeted financial websites, making infected systems appear inactive during automated analysis. That restriction […]

The post Casbaneiro Banking Trojan Activates Only When Victims Visit Targeted Bank Websites appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A new GhostAction campaign has expanded to more than 500 compromised GitHub accounts and has injected malicious workflows into tens of thousands of repositories since October 7, 2026. Socket’s October 9 update describes a credential theft operation targeting GitHub Actions secrets, cloud credentials, and AI service API keys embedded in source code and repository history. […]

The post GhostAction Hackers Compromise 500+ GitHub Accounts to Steal Cloud and AI API Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.