Threats tagged 'malware'

MixShell Malware Delivered via Contact Forms Targets U.S. Supply Chain Manufacturers Source: https://thehackernews.com/2025/08/mixshell-malware-delivered-via-contact.html

Malware#infosecnews#redditGermany+9

New Android Hook Malware Variant Locks Devices With Ransomware Source: https://hackread.com/android-hook-malware-variant-locks-devices-ransomware/

Malware#infosecnews#redditGermany+7

Malicious apps with +19M installs removed from Google Play because spreading Anatsa banking trojan and other malware Source: https://securityaffairs.com/181528/malware/malicious-apps-with-19m-installs-removed-from-google-play-because-spreading-anatsa-banking-trojan-and-other-malware.html

Malware#infosecnews#redditGermany+7

Fake Voicemail Emails Install UpCrypter Malware on Windows Devices Source: https://hackread.com/fake-voicemail-emails-install-upcrypter-malware-windows/

Malware#infosecnews#redditGermany+7

Android.Backdoor.916.origin malware targets Russian business executives Source: https://securityaffairs.com/181503/malware/android-backdoor-916-origin-malware-targets-russian-business-executives.html

Malware#infosecnews#redditGermany+6

Pakistan-linked APT36 abuses Linux .desktop files to drop custom malware in new campaign Source: https://securityaffairs.com/181513/apt/pakistan-linked-apt36-abuses-linux-desktop-files-to-drop-custom-malware-in-new-campaign.html

Malware#infosecnews#redditGermany+4

COOKIE SPIDER's Malvertising Attack Drops New SHAMOS macOS Malware Source: https://hackread.com/cookie-spider-malvertising-new-shamos-macos-malware/

Malware#infosecnews#redditGermany+5

A malicious campaign is targeting users through fake YouTube video download sites, distributing Proxyware malware. The attack involves a downloader disguised as WinMemoryCleaner, which installs NodeJS and runs malicious JavaScript. This script then installs various Proxyware programs, including DigitalPulse, HoneyGain, and recently, Infatica. The malware uses Task Scheduler for persistence and sends system information to a C&C server. The Proxyware exploits the infected system's network bandwidth for the attacker's profit. Users in South Korea have been particularly targeted. To prevent infection, users should avoid installing executables from suspicious websites and use antivirus software.

Malware#youtube#digitalpulseSouth Korea+5

Ex-Developer Jailed Four Years for Sabotaging Ohio Employer with Kill-Switch Malware Source: https://thehackernews.com/2025/08/ex-developer-jailed-four-years-for.html

Malware#infosecnews#redditGermany+6

Hackers Using New QuirkyLoader Malware to Spread Agent Tesla, AsyncRAT and Snake Keylogger Source: https://thehackernews.com/2025/08/hackers-using-new-quirkyloader-malware.html

Malware#infosecnews#redditGermany+6

Fake Antivirus App Spreads Android Malware with Livestreaming Capability to Spy on Russian Users Source: https://hackread.com/fake-antivirus-app-android-malware-spy-russian-users/

Malware#infosecnews#redditPoland+6

New DripDropper Malware Exploits Linux Flaw Then Patches It Lock Rivals Out Source: https://hackread.com/dripdropper-malware-exploits-linux-flaw-patche-lock-out/

Malware#infosecnews#redditGermany+7

AI Website Builder Lovable Abused for Global Phishing and Malware Scams Source: https://hackread.com/ai-website-builder-lovable-phishing-malware-scams/

Malware#infosecnews#redditGermany+7

Apache ActiveMQ Flaw Exploited to Deploy DripDropper Malware on Cloud Linux Systems Source: https://thehackernews.com/2025/08/apache-activemq-flaw-exploited-to.html

Malware#infosecnews#redditGermany+6

Analyzing evolution of the PipeMagic malware Source: https://securityaffairs.com/181286/breaking-news/analyzing-evolution-of-the-pipemagic-malware.html

Malware#infosecnews#redditGermany+6

ERMAC V3.0 Banking Trojan Source Code Leak Exposes Full Malware Infrastructure Source: https://thehackernews.com/2025/08/ermac-v30-banking-trojan-source-code.html

Malware#infosecnews#redditGermany+9

Scammers Compromised by Own Malware, Expose $4.67M Operation and Identities Source: https://hackread.com/scammers-compromised-by-malware-expose-operation/

Malware#infosecnews#redditGermany+4

On Going Malvertising Attack Spreads New Crypto Stealing PS1Bot Malware Source: https://hackread.com/malvertising-attack-crypto-stealing-ps1bot-malware/

Malware#infosecnews#redditGermany+5

A Ukrainian Web3 team's interview process involved cloning a GitHub repository containing malicious components. Analysis revealed the project replaced a legitimate dependency with a malicious NPM package, rtk-logger@1.11.5. This package collected sensitive data, including cryptocurrency wallet information, from popular browsers and uploaded it to an attacker-controlled server. The malware also implemented keylogging, screen capture, and clipboard monitoring. Two other GitHub accounts were found using a similar malicious package. The scam aimed to trick interviewees into executing malicious code, potentially leading to data leaks and asset theft. Developers are advised to exercise caution when handling unknown GitHub projects and to use isolated environments for execution.

Malware#redux-ace#rtk-loggerUkraine+5

Chapter #1 Reward : $100 This challenge is part of ongoing research at Malwation examining the potential of abusing foundation model via manipulation for malware development. We are currently preparing a comprehensive paper documenting the scope and implications of AI-assisted threat development. The ZigotRansomware sample was developed entirely through foundation model interactions without any human code contribution. No existing malware code was mixed in or given as source code sample, no pre-built packer were integrated, and no commercial/open-source code obfuscation product were applied post-generation. Research Objectives This challenge demonstrates the complexity level achievable through pure AI code generation in adversarial contexts. The sample serves as a controlled test case to evaluate: \- Reverse engineering complexity of AI-generated malware \- Code structure and analysis patterns unique to AI-generated threats \- Defensive capability gaps against novel generation methodologies

Malware#netsec#redditGermany+8