FrostyNeighbor: Fresh mischief and digital shenanigans

ESET’s WeLiveSecurity feed aggregates multiple May 2026 research write-ups and guidance: primary technical reports include updated FrostyNeighbor activity and an expanded compromise chain for ongoing cyberespionage; discovery of PromptSpy (the first known Android malware to leverage generative AI); a new NGate variant hidden in a trojanized NFC payment app (possible AI-assisted development); ScarCruft supply‑chain compromises of gaming platforms delivering backdoored Windows/Android games; GopherWhisper, a newly identified China-aligned APT targeting Mongolian government institutions; and a Dy