We talk about all the newest threats, malware strains, and cybersecurity events related to malware in this category. Keep up with new malware methods, attack vectors, and the best ways to find and stop malware. Our reporting shows how malware changes over time and how it affects the safety of systems and data.
A China-aligned espionage group abused the update traffic of Sogou Input Method, one of China's most widely used keyboard apps,…
Phexia, a modular macOS backdoor and infostealer sold to multiple threat actors. Operators deliver it through ClickFix lures. Since May…
An evolving fake-download campaign that disguises trojanized installers as popular games, cracked software, and utilities to monetize Windows computers. Rather…
A campaign tracked as Yoba abuses interest in generative AI to push cryptocurrency-mining malware through fake GitHub projects. Check Point…
DarkBlinders has compromised a high-profile Israeli individual associated with the security sector and a government cloud environment in Iraqi Kurdistan,…
A campaign by the BITTER threat group that delivers a custom remote access trojan (RAT) called PapRAT to South Asian…
Google and industry partners have dismantled the XCPE botnet. This firmware-level backdoor enrolled more than 1.3 million Android set-top boxes.…
UAT-11473, an advanced persistent threat actor deploying KeyDrift, a custom malware framework targeting Cisco Catalyst SD-WAN controllers. The framework embeds…
INJ3CTOR3 has expanded its FreePBX toll-fraud campaign with automated credential theft, letting attackers keep billing unauthorized calls to victims even…
A judicial-themed phishing campaign targeting Colombian organizations that delivers XWorm through obfuscated scripts, encrypted PowerShell, and a reusable .NET loader.…