Hirudo Android Trojan Replaces Banking Apps to Steal Credentials
2026-10-15T08:51:35Z•1aa15eb654c98cdd9c255918aab3541168d5a66b5d3dd3bc7e8ee7a3d1c095fc
CVE-2026-104935CVE-2026-96951CVE-2026-97229AI securityAndroid malwareCISA KEVGitLabHirudoIoT securityIvanti Connect SecureMicrosoft Windows ShellOT/ICSRATVPN exploitationXWormactively exploited vulnerabilitybanking trojancredential theftfinancial fraudransomware-like disruptionremote code executionsurveillancezero-day
What happened
SecurityAffairs RSS feed covering major October 2026 cybersecurity developments, including the Hirudo Android banking trojan, actively exploited Windows Shell and Ivanti vulnerabilities added to CISA's KEV catalog, a critical unauthenticated GitLab remote-code-execution flaw, XWorm surveillance capabilities, attacks against supermarket refrigeration systems, and emerging risks from autonomous AI replication across IoT devices.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- 1aa15eb654c98cdd9c255918aab3541168d5a66b5d3dd3bc7e8ee7a3d1c095fc
- Enrichment time
- 2026-10-15T08:51:35Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.