Gonimos ::Blog Post

Android Trojan 'Fantasy Hub' Malware Service Turns Telegram Into a Hub for Hackers

Cybersecurity researchers have uncovered a new Android remote access trojan (RAT) called Fantasy Hub, sold on Russian Telegram channels as a Malware-as-a-Service (MaaS) tool. It allows attackers to spy on victims, steal SMS, contacts, call logs, photos, and banking data, and even stream live camera and microphone feeds. Fantasy Hub uses fake Google Play update pages and banking overlays to trick users, mainly targeting Russian financial institutions. It costs about $200 weekly or $500 monthly, with a bot managing subscriptions and trojanized app builds. The malware abuses Android SMS permissions for full device control and mimics legitimate apps. Researchers warn that such MaaS tools lower the barrier for new cybercriminals and expand Android threats globally. Recent reports also show a 67% rise in Android malware, including Anatsa, Void, and Xnotice, targeting users worldwide through fake apps and phishing campaigns.

Cybersecurity News

GootLoader Is Back, Using a New Font Trick to Hide Malware on WordPress Sites

GootLoader, a long-running JavaScript-based malware loader, has resurfaced, according to Huntress. Since late October 2025, three infections have been detected — two leading to full domain controller compromises within 17 hours. The latest variant uses custom WOFF2 fonts to hide filenames and XOR-encrypted ZIP payloads delivered via compromised WordPress sites. It tricks victims searching online for legal or document templates and hides its payloads through font-based obfuscation and ZIP file evasion techniques. Once executed, GootLoader deploys the Supper backdoor, enabling remote access and lateral movement, sometimes leading to ransomware attacks. Researchers note this shows that even simple, well-hidden tools can be highly effective without advanced exploits.

Cybersecurity

Fortinet Launches Secure AI Data Center Solution to Protect Models, Data, and Infrastructure at Scale

Fortinet has launched the Secure AI Data Center solution, the first end-to-end security framework designed to protect AI infrastructures, including data centers, applications, and large language models (LLMs). The solution offers advanced AI threat defense, ultra-low latency, and up to 69% lower power consumption than traditional methods. A key part of the launch is the FortiGate 3800G, a new high-performance data center firewall powered by NP7 and SP5 ASICs with 400 GbE connectivity, built to protect GPU clusters and AI workloads in real time. The Secure AI Data Center delivers: ASIC-accelerated performance with energy efficiency LLM and application protection against data leaks and prompt injection Unified management via the Fortinet Security Fabric Quantum-safe encryption for future-ready data protection Fortinet’s new framework sets a benchmark for secure, scalable AI environments, helping enterprises run AI workloads safely, efficiently, and at hyperscale.

Special news

Android Trojan 'Fantasy Hub' Malware Service Turns Telegram Into a Hub for Hackers

GootLoader Is Back, Using a New Font Trick to Hide Malware on WordPress Sites

Fortinet Launches Secure AI Data Center Solution to Protect Models, Data, and Infrastructure at Scale

Categories

Recent Posts

Tag Clouds

Quick Links

Office