This month in security with Tony Anscombe – March 2026 edition
2026-04-01T08:51:38Z•820c541269071a0eecf48e0f99375e73a1bff861bf66cd19af62a8c8ae55d79e
android-malwareaptcloud-securitycve-2025-50165data-wiperdynowiperedr-killersgenerative-ailongnosedgoblinphishingpromptspysandwormsednitsilver-foxvulnerable-drivers
What happened
Collection of ESET WeLiveSecurity advisories and research (Jan–Mar 2026) highlighting multiple high-risk threats and remediation priorities: discovery of PromptSpy—the first known Android malware to incorporate generative AI into its execution flow; DynoWiper data‑wiper activity targeting a Polish energy company attributed to Sandworm; resurgence of APTs (Sednit, LongNosedGoblin) conducting espionage via Group Policy and targeted lures; an active Silver Fox phishing campaign in Japan exploiting tax/HR season; analysis of the “EDR killer” ecosystem that abuses vulnerable drivers to disable dete
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- eset_welivesecurity
- Record identifier
- 820c541269071a0eecf48e0f99375e73a1bff861bf66cd19af62a8c8ae55d79e
- Enrichment time
- 2026-04-01T08:51:38Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.