“StreamRat” — 9 distilled results

ThreatFabric disclosed StreamRat, an Android banking trojan distributed via fake TV streaming ads on Meta targeting Spanish users, primarily in Spain. The campaign potentially reached 570,950 accounts

ThreatFabric disclosed StreamRat, an Android banking trojan distributed via fake TV streaming ads on Meta targeting Spanish users, primarily in Spain. The campaign potentially reached 570,950 accounts in the EU, demonstrating abuse of legitimate ad infrastructure for large-scale malware delivery.

Cybersecurity threats and breaches reported

Between September 2–3, 2026, infosec sources reported multiple security incidents including StreamRat malware distributed via Meta ads, a $17 billion Meta settlement affecting teens, GeoNetwork RCE vulnerabilities, Fishbrain password theft, Pegasus spyware targeting Serbian activists, and 153 million driver license images on the dark web. The incidents span malware, data breaches, and spyware deployment.