[spynote]

August 26, 2026

• A payment-card fraud workflow does not ask victims for banking credentials. A caller posing as bank security persuades the victim to install a “support” application that is actually SpyNote malware, which abuses the phone’s NFC capability to relay payment-card data. Ilta-Sanomat reports the warning. · Threat Activity & Supply Chain

in Oracle WebLogic Is Under Active Attack

August 14, 2026

• WindRelay + SpyNote combo relays live credit-card data. A new Android NFC-relay malware paired with the SpyNote RAT streams card data to attackers in real time and takes out fraudulent loans. (BleepingComputer) · Threat Activity

in vCenter Under Active Exploitation: Critical RCE Weaponized for Reverse-SSH Persistence Across 47 Countries