Android phones produced by four major tech organizations were susceptible to over-the-air provisioning as an attack vector. Kaspersky Lab uncovered more than 300,000 attempts to infect its users with school-themed malware. Researchers at Yoroi Security came across the fourth version of JSWorm, a ransomware family that, despite its name, employs neither JavaScript nor wormlike behavior. Researchers also observed a new variant of one ransomware family and observed another ransomware threat leveraging fake forum posts on compromised sites for distribution.”]