New Buterat Backdoor Malware Found in Enterprise and Government Networks
Source: https://hackread.com/buterat-backdoor-malware-enterprise-govt-networks/
From MostereRAT to ClickFix: New Malware Campaigns Highlight Rising AI and Phishing Risks
Source: https://thehackernews.com/2025/09/from-mostererat-to-clickfix-new-malware.html
GPUGate Malware Uses Google Ads and Fake GitHub Commits to Target IT Firms
Source: https://thehackernews.com/2025/09/gpugate-malware-uses-google-ads-and.html
Lazarus Group Deploys Malware With ClickFix Scam in Fake Job Interviews
Source: https://hackread.com/lazarus-group-malware-clickfix-scam-fake-job-interview/
Lazarus Group Expands Malware Arsenal With PondRAT, ThemeForestRAT, and RemotePE
Source: https://thehackernews.com/2025/09/lazarus-group-expands-malware-arsenal.html
Silver Fox APT Exploits Signed Windows Driver to Deliver ValleyRAT Malware
Source: https://hackread.com/silver-fox-apt-exploit-signed-windows-driver-valleyrat/
ScarCruft Uses RokRAT Malware in Operation HanKook Phantom Targeting South Korean Academics
Source: https://thehackernews.com/2025/09/scarcruft-uses-rokrat-malware-in.html
TamperedChef Malware Disguised as Fake PDF Editors Steals Credentials and Cookies
Source: https://thehackernews.com/2025/08/tamperedchef-malware-disguised-as-fake.html
Sliding into your DMs: Abusing Microsoft Teams for Malware Delivery
Source: https://permiso.io/blog/sliding-into-your-dms-abusing-microsoft-teams-for-malware-delivery?hs_preview=VYVYybGX-195188659586
An interesting approach to malware by checking for Claude Code CLI and Gemini CLI in compromised \`nx\` package to explore local filesystem and steal credentials, api keys, wallets, etc.