Low-cost Android phones ship with residential proxy malware

2026-10-08T19:23:21Z•d156931b75096838527354d901ad7d1e22b5dbfd32f73d48c837592f76d673d8
AI infrastructureAndroidCisco NX-OSDNS compromiseFortiBleedFortiGateGitHub supply-chain abuseNexus switchesOAuth securitySmartLoaderStealC infostealerVPNad fraudarbitrary code executionbackup securitycredential theftcryptominingcybercrimedomain hijackingfirmware compromisemalwareransomwareresidential proxiesroot privilegessocial engineering

What happened

A BleepingComputer security-news feed covering active malware campaigns, critical network-device vulnerabilities, credential theft and breaches, domain/DNS hijacking, cryptomining, ransomware targeting backups, and related cybercrime developments. The highest-priority items include critical Cisco NX-OS flaws enabling root-level arbitrary code execution, ongoing FortiGate exploitation that locks out VPN administrators, firmware-embedded Android malware, and attacks against exposed AI services.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
bleepingcomputer
Record identifier
d156931b75096838527354d901ad7d1e22b5dbfd32f73d48c837592f76d673d8
Enrichment time
2026-10-08T19:23:21Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.