New CrystalRAT malware adds RAT, stealer and prankware features

Multiple active threats and high-impact vulnerabilities reported across platforms: a new CrystalRAT malware-as-a-service offering RAT, stealer, keylogger and prankware capabilities is being promoted on Telegram; attackers are exploiting a TrueConf zero-day to push malicious updates; Apple expanded iOS 18 update coverage to mitigate active DarkSword exploit-kit attacks; a new EvilTokens kit enables Microsoft device-code phishing for account hijacks and BEC; the NoVoice Android malware was distributed via >50 Play Store apps (≈2.3M installs); Google patched a fourth Chrome zero-day exploited in