Geneva is a genetic algorithm that automatically learns how to evade nation state censors.

Last seen in August 2021, Zloader, a banking malware designed to steal user credentials and private information, is back with a simple yet sophisticated infection chain. Previous Zloader campaigns, which were seen in 2020, used malicious documents, adult sites and Google ads to infect systems.
Evidence of the new campaign was first seen around early November 2021. The techniques incorporated in the infection chain include the use of legitimate remote management software (RMM) to gain initial access to the target machine.

A previously unreported threat actor has been targeting civil society for over a decade. Read about how it operates and its relationships to other threats.