Some of the most important activity on a compromised Android device occurs when a threat attempts to move beyond the normal application sandbox: an unexpected process starts, a shell is opened, or a ...

A recent threat report highlights how attackers are using QR codes and fraudulent AI tools to evade traditional security controls and reach users across devices. Researchers observed campaigns ...

The US Department of Homeland Security (DHS) upped the ante for AI Governance by issuing an order, published in the Federal Register on October 20, 2026, barring the use of DeepSeek Products by US ...

While traditional endpoint security solutions provide cloud-based threat detection and network telemetry, relying on them alone can leave critical blind spots on mobile devices. Employee mobile ...

Since April 2024, zLabs has identified a growing trend of Android applications misusing NFC and Host Card Emulation (HCE) to illegally obtain payment data and conduct fraudulent transactions. What ...

The zLabs research team has discovered Rokarolla, a newly identified Android banking trojan named after its Command and Control (C2) infrastructure. Primarily distributed through malicious websites ...

Unlike traditional spyware that attempts to hide on a device for months, DarkSword is designed for maximum speed and zero footprint. The attack unfolds conceptually in three rapid stages: Within ...

The zLabs research team recently detected a new variant of the GoldPickaxe mobile banking Trojan actively targeting customer environments, which were identified and stopped by Zimperium's Mobile ...

In recent months, Zimperium’s zLabs team has identified a surge in Android Banking Trojan activity, marking a sophisticated shift in the mobile threat landscape. Our researchers successfully tracked ...

The zLabs research team has identified a new threat campaign targeting Spanish Android users. DroidLock, a malware more accurately classified as ransomware, propagates via phishing websites. It has ...