<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:news="http://www.google.com/schemas/sitemap-news/0.9">
  <url>
    <loc>https://blog.gridinsoft.com/fake-netflix-apk-panda-rat/</loc>
    <news:news>
      <news:publication>
        <news:name>Gridinsoft</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-03T17:29:57+00:00</news:publication_date>
      <news:title>Fake Netflix APK Delivers PanDa RAT Through Meta Ads</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://blog.gridinsoft.com/fake-exodus-installer-rat/</loc>
    <news:news>
      <news:publication>
        <news:name>Gridinsoft</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-03T11:27:20+00:00</news:publication_date>
      <news:title>Fake Exodus Installer Hides a RAT Behind a Wallet That Never Opens</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://blog.gridinsoft.com/iauthflow-v2-rogue-google-passkey/</loc>
    <news:news>
      <news:publication>
        <news:name>Gridinsoft</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-03T05:24:33+00:00</news:publication_date>
      <news:title>iAuthFlow v2 Adds a Rogue Google Passkey That Survives Reset</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://blog.gridinsoft.com/agent-tesla-emoji-jscript-malware/</loc>
    <news:news>
      <news:publication>
        <news:name>Gridinsoft</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-02T23:28:35+00:00</news:publication_date>
      <news:title>Agent Tesla Malware Hides in Emoji-Obfuscated JScript</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://blog.gridinsoft.com/superior-malicious-browser-extensions/</loc>
    <news:news>
      <news:publication>
        <news:name>Gridinsoft</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-02T17:40:30+00:00</news:publication_date>
      <news:title>Superior: 19 Browser Extensions Steal Wallets and Passwords</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://blog.gridinsoft.com/synkloader-malware-fake-lock-screen/</loc>
    <news:news>
      <news:publication>
        <news:name>Gridinsoft</news:name>
        <news:language>en</news:language>
      </news:publication>
      <news:publication_date>2026-09-02T15:34:03+00:00</news:publication_date>
      <news:title>SynkLoader Malware Uses a Fake Windows Lock Screen to Steal Passwords</news:title>
    </news:news>
  </url>
</urlset>
