Threats tagged 'malware'

I’ve been seeing more and more cases where the SOC reports success, process killed, host isolated, dashboard green. Yet weeks later the same organisation is staring at ransom notes or data leaks. The problem: we treat every alert like a dodgy PDF. Malware was contained. The threat actor was not. SOCs measure noise (MTTD, MTTR, auto-contain). Adversaries measure impact (persistence, privilege, exfiltration). That’s why even fully “security-compliant” companies lose millions every day. Look at what's happening in the UK. Curious how others here are approaching this: * Do you have workflows that pivot from containment to investigation by default? * How do you balance speed vs depth when you suspect a human adversary is involved? * Are you baking forensic collection into SOC alerts, or leaving it for the big crises? Full piece linked for context.

Malware#netsec#redditGermany+8

Moonlock Lab researchers have spotted a new macOS malware campaign that leverages **malvertising + fake social media profiles** to distribute malicious apps. Once installed, the malware exfiltrates sensitive data and can be updated remotely with new modules. This trend shows that macOS is no longer “low priority” for attackers – they’re actively adapting Windows-style tactics for Apple’s ecosystem.

Malware#netsec#redditGermany+5

New YiBackdoor Malware Shares Major Code Overlaps with IcedID and Latrodectus Source: https://thehackernews.com/2025/09/new-yibackdoor-malware-shares-major.html

Malware#infosecnews#redditGermany+9

BadIIS Malware Spreads via SEO Poisoning — Redirects Traffic, Plants Web Shells Source: https://thehackernews.com/2025/09/badiis-malware-spreads-via-seo.html

Malware#infosecnews#redditGermany+9

ComicForm and SectorJ149 Hackers Deploy Formbook Malware in Eurasian Cyberattacks Source: https://thehackernews.com/2025/09/comicform-and-sectorj149-hackers-deploy.html

Malware#infosecnews#redditGermany+6

Fake Ukrainian Police Emails Spread New CountLoader Malware Loader Source: https://hackread.com/fake-ukrainian-police-emails-countloader-malware-loader/

Malware#infosecnews#redditPoland+6

Researchers expose MalTerminal, an LLM-enabled malware pioneer Source: https://securityaffairs.com/182433/malware/researchers-expose-malterminal-an-llm-enabled-malware-pioneer.html

Malware#infosecnews#redditGermany+7

DPRK Hackers Use ClickFix to Deliver BeaverTail Malware in Crypto Job Scams Source: https://thehackernews.com/2025/09/dprk-hackers-use-clickfix-to-deliver.html

Malware#infosecnews#redditGermany+6

Researchers Uncover GPT-4-Powered MalTerminal Malware Creating Ransomware, Reverse Shell Source: https://thehackernews.com/2025/09/researchers-uncover-gpt-4-powered.html

Malware#infosecnews#redditGermany+9

CISA exposes malware kits deployed in Ivanti EPMM attacks Source: https://www.bleepingcomputer.com/news/security/cisa-exposes-malware-kits-deployed-in-ivanti-epmm-attacks/

Malware#infosecnews#redditGermany+7

UNC1549 Hacks 34 Devices in 11 Telecom Firms via LinkedIn Job Lures and MINIBIKE Malware Source: https://thehackernews.com/2025/09/unc1549-hacks-34-devices-in-11-telecom.html

Malware#infosecnews#redditGermany+9

SystemBC malware turns infected VPS systems into proxy highway Source: https://www.bleepingcomputer.com/news/security/systembc-malware-turns-infected-vps-systems-into-proxy-highway/

Malware#infosecnews#redditGermany+7

New Raven Stealer Malware Hits Browsers for Cookies, Passwords and Payment Data Source: https://hackread.com/raven-stealer-malware-browsers-passwords-payment-data/

Malware#infosecnews#redditGermany+9

HiddenGh0st, Winos and kkRAT Exploit SEO, GitHub Pages in Chinese Malware Attacks Source: https://thehackernews.com/2025/09/hiddengh0st-winos-and-kkrat-exploit-seo.html

SEO Poisoning Attack Hits Windows Users With Hiddengh0st and Winos Malware Source: https://hackread.com/seo-poisoning-attack-windows-hiddengh0st-winos-malware/

Malware#infosecnews#redditGermany+6

Muck Stealer Malware Used Alongside Phishing in New Attack Waves Source: https://hackread.com/muck-stealer-malware-phishing-new-attack-waves/

Malware#infosecnews#redditGermany+8

ChillyHell macOS Malware Resurfaces, Using Google.com as a Decoy Source: https://hackread.com/chillyhell-macos-malware-resurfaces-google-com-decoy/

Malware#infosecnews#redditGermany+7

*Today, we have intuitively adapted to Quick Response (QR) codes in the tapestry of our day-to-day life.* Whether we are scanning the menu at a restaurant or checking in to our flight, they have seamlessly integrated into the consumption of products and information. Yet, with its widespread adoption, it has also acquired an accompanying security challenge. Bad actors have capitalized on QR codes to perpetrate phishing attacks, deliver malware, and exfiltrate data without the user’s knowledge. Oftentimes, this is caught after the attack occurs. This is why you should [use a safe online QR code scanner](https://www.qrstuff.com/scan) that authenticates the link before you click on it is so critical.

Malware#infosecnews#redditGermany+9

Chinese APT Hits Philippine Military Firm with New EggStreme Fileless Malware Source: https://hackread.com/chinese-apt-philippine-military-eggstreme-fileless-malware/

Malware#infosecnews#redditFrance+9

New Fileless Malware Attack Spotted Using AsyncRAT for Credential Theft Source: https://hackread.com/fileless-malware-attack-asyncrat-credential-theft/

Malware#infosecnews#redditGermany+6