A new malware family called Jaff has been identified by researchers who say they are currently tracking multiple and massive spam campaigns distributing the malware via the Necurs botnet.

Google Play is a bit like a happening nightclub: the faster you let people in, the less time you have to spend keeping troublemakers out.

Researchers spotted a strain of cookie stealing malware, injected into a legitimate JavaScript file, masquerading as a WordPress core domain.

Last week, crooks hacked one of the HandBrake app’s download servers and used the popular video app to distribute Mac spyware.

Our researchers have found more than 50 apps in Google Play that contain XavirAd, which says it doesn’t collect your personal information and then promptly sucks it up and sends it back to the mothership

The publisher’s blaming a third-party contractor and “human error.”

Techniques used to poison a version of the Android Chrome browser with Andr/SandRat-C, Andr/Rootnik-AH are finding their way into other apps – and into the Play Store

The open source HandBrake project is warning anyone who recently downloaded the Mac version of the software that they’re likely infected with malware.

More on that Google-phish-and-worm saga, with some tips on what to do now, and how to avoid this sort of thing in the future.

Hackers behind the Carbanak criminal gang have devised a clever way to gain persistence on targeted systems to more effectively pull off financially motivated crimes.