This month in security with Tony Anscombe – April 2026 edition

ESET’s April 2026 coverage highlights a surge in high‑impact offensive activity and evolving malware techniques. Key findings include discovery of a new China‑aligned APT named GopherWhisper targeting Mongolian government institutions; a new NGate variant hidden in a trojanized NFC payment app (possibly developed with AI assistance); PromptSpy, the first known Android malware to incorporate generative AI in its execution flow; and DynoWiper, a destructive data‑wiper attributed to Sandworm that impacted Poland’s energy sector. Reports also describe a Sednit resurgence, attackers abusing EDR‑vul