Field notes from the edge.
What our engineers learned this week. Hands-on technical deep-dives, postmortems, and strategy frameworks.
AINew Rokarolla Android Malware Steals PINs, SMS Codes, and Crypto Wallet Funds
Zimperium's zLabs has identified Rokarolla, a sophisticated Android banking trojan that targets 217 banking and cryptocurrency applications with 137 remote commands. The malware enables attackers to gain comprehensive control over infected devices, including stealing lock-screen PINs, intercepting SMS messages, manipulating clipboard content to redirect cryptocurrency payments, and disabling Googl
AIEuropol Disrupts AudiA6 Crypto Laundering Service Used by Ransomware Gangs
Europol has successfully disrupted AudiA6, a major cryptocurrency laundering service that facilitated money laundering for ransomware gangs and cybercriminal networks. The operation eliminated a critical financial infrastructure that processed an estimated €336 million (~$389 million) in illicit proceeds, representing a significant blow to cybercriminal monetization capabilities.
AICritical Zcash Vulnerability Found and Fixed
Security researcher Taylor Hornby discovered a critical vulnerability in Zcash's Orchard privacy pool that could have allowed attackers to create cryptocurrency from nothing by exploiting a validation check flaw. The vulnerability, found using Claude Opus 4.8, has been patched, but there's no way to determine if it was previously exploited. This incident highlights fundamental security concerns wi