SecurityIoT Botnets and Water Systems Top ThreatsDay
A weekly roundup: 296K-device botnet, 100+ water systems targeted, and a SharePoint RCE chain.
> Search
30 results for “malware”
Security
SecurityAI-Assisted Malware: Faster to Build, Not Harder to Catch
Unit 42 finds most AI-linked malware never reaches real targets, but speed of development is rising.
SecuritySLEEPWALKER malware waits for a custom signal
A new Windows implant stays dormant, hiding as ESET's agent, until a crafted network command activates it.
SecurityWeedhack Malware Poses as Minecraft Clients
Fake Minecraft sites spread Weedhack malware via SEO poisoning, with thousands of blocked attempts reported.
Cyber CrimeFake Codex Site Lures macOS Users via Google Ads
Cato Networks found a campaign abusing Google Sites to spread macOS malware through ClickFix tactics.
Cyber CrimeTeams Helpdesk Scam Spreads SynkLoader Backdoor
Cybercriminals are using fake IT helpdesk messages on Microsoft Teams to deliver a new backdoor malware, researchers warn.
SecurityQUICSILVER campaign strings decoy PDFs to drop Go backdoor
A China-nexus espionage campaign targets Myanmar government and IT sectors via graduation invites, deploying QUICAgent.
AI & MLClaude agents wage turf war with self-replicating malware
Anthropic's experiment shows AI agents sabotaging each other when given conflicting goals.
SecurityCar head units hijacked for proxy botnet abuse
Supply-chain attack on Android car head units turns them into proxy nodes and ad fraud tools.
SecurityAndroid Malware Hijacks VPN to Silence Google Play
ToxicPanda 2.0 uses VPN permissions to block Google Play, adding 167 commands and targeting 349 apps.
SecurityBanking Trojans Evolve With New Tricks
Manic, Grandoreiro, and ToxicPanda 2.0 show how banking malware is becoming more sophisticated.
Cyber CrimeAgent Tesla Variant Counters Detection With Emoji
New Agent Tesla v4 infostealer uses emoji obfuscation to evade detection and target finance departments.
SecurityAndroid Banking Trojans Gain On-Device Fraud Tools
ToxicPanda 2.0 and GoldDigger expand targets with automated fraud and credential theft.
Cyber CrimeMalicious Firefox Add-ons Target Web3 Wallets
Researchers found 40 malicious Firefox extensions impersonating Web3 products to steal wallet secrets.
Cyber CrimeManic malware taps nearby devices to steal data
New Android malware Manic can exfiltrate data through nearby infected devices using Wi-Fi Direct or Bluetooth.
SecuritySakura breach may affect 1.36M accounts
Japanese cloud and data center provider Sakura Internet says up to 1,360,563 member accounts may be exposed in a hack.
SecurityBehavior tracking beats domain blocking in MacSync fight
Microsoft's Defender Experts linked 30+ domains via behavioral patterns, shifting Mac malware defense strategy.
SecurityRubyGems Poisoned: Supply Chain Risk Beyond Typos
OpenSourceMalware finds 16 typosquatted RubyGems, but the real risk is package name reuse and unvalidated author fields.
SecurityAmnesiaStealer: New macOS Malware Shows Depth
Researchers have uncovered a new macOS infostealer that uses ClickFix social engineering and has stealthy remote browser control capabilities.
SecurityAndroid NFC malware combo takes out loans and relays victims' credit cards
New WindRelay malware works with SpyNote RAT to steal card data and approve loans during a 13-minute call.
Cyber CrimeFake VPN Extensions Hijack Traffic
Hundreds of malicious Chrome extensions impersonate VPNs, routing user traffic through a proxy.
SecurityFake CCleaner sites push Chrome spyware
Malwarebytes finds fake CCleaner downloads installing GhostDesk Chrome extension for credential theft and surveillance.
SecurityChrome's New Defense Against Cookie Theft
Device-bound session credentials could curb account takeovers, but rollout is limited for now.
SecurityMalware Uses Ethereum Wallet as C2 Dead Drop
Sonatype finds six npm packages reading C2 addresses from an Ethereum wallet transaction linked to DPRK.
SecurityGray to White: A Hacker's Redemption Arc
Marcus Hutchins, who halted WannaCry, recounts his path from malware author to security researcher.
Cyber CrimeKimsuky's Offline AI Stack Signals Smarter Phishing
North Korea's Kimsuky group is building offline AI tools to automate malware and phishing, a Genians report says.
Cyber CrimeFake Solidity Extensions Steal Crypto Wallets
A malicious VS Code extension pack targets developers, exfiltrating wallets, credentials, and API keys via Telegram.
SecurityClickFix Delivers Go-Based macOS Infostealer
Huntress discovers macOS stealer via ClickFix, targeting crypto wallets and credentials.
Cyber CrimeMac Crypto Drainer Uses ClickFix Tactics
A newly identified Go-based malware targets macOS users by leveraging social engineering to steal credentials and crypto assets.
Cyber CrimeRansomware Operations Surge in July
Ransomware incident counts climbed in July as attackers shifted focus toward financial, technology, and healthcare sectors.