Threats tagged 'malware'

Curly COMrades cyberspies hit govt orgs with custom malware Source: https://www.bleepingcomputer.com/news/security/curly-comrades-cyberspies-hit-govt-orgs-with-custom-malware/

Malware#infosecnews#redditGermany+6

Russian-Linked Curly COMrades Deploy New MucorAgent Malware in Europe Source: https://hackread.com/russian-curly-comrades-mucoragent-malware-europe/

Malware#infosecnews#redditGermany+6

Details emerge on WinRAR zero-day attacks that infected PCs with malware Source: https://www.bleepingcomputer.com/news/security/details-emerge-on-winrar-zero-day-attacks-that-infected-pcs-with-malware/

WinRAR zero-day exploited to plant malware on archive extraction Source: https://www.bleepingcomputer.com/news/security/winrar-zero-day-flaw-exploited-by-romcom-hackers-in-phishing-attacks/

The GreedyBear attack group has launched a massive crypto theft operation, utilizing 150 weaponized Firefox extensions, nearly 500 malicious executables, and numerous phishing websites. Their tactics include Extension Hollowing to bypass marketplace security, distributing various malware families, and creating scam sites masquerading as crypto products. The campaign's infrastructure is consolidated to a single IP address, suggesting a centralized backend. The group has expanded from its earlier Foxy Wallet campaign and shows signs of potential growth beyond Firefox. The attackers are leveraging AI to scale their operations, making it challenging for traditional security measures to keep up. The campaign has reportedly stolen over $1 million from victims.

Campaign#malware#browser extensionsGermany+5

SocGholish Malware Spread via Ad Tools; Delivers Access to LockBit, Evil Corp, and Others Source: https://thehackernews.com/2025/08/socgholish-malware-spread-via-ad-tools.html

Malware#infosecnews#redditGermany+6

15,000 Fake TikTok Shop Domains Deliver Malware, Steal Crypto via AI-Driven Scam Campaign Source: https://thehackernews.com/2025/08/15000-fake-tiktok-shop-domains-deliver.html

Malware#infosecnews#redditGermany+7

New Plague Linux malware stealthily maintains SSH access Source: https://www.bleepingcomputer.com/news/security/new-plague-malware-backdoors-linux-devices-removes-ssh-session-traces/

Malware#infosecnews#redditGermany+9

New JSCEAL Malware Targets Millions via Fake Crypto App Ads Source: https://hackread.com/jsceal-malware-targets-millions-fake-crypto-app-ads/

Malware#infosecnews#redditGermany+5

LegalPwn Attack Tricks Popular GenAI Tools Into Misclassifying Malware as Safe Code Source: https://hackread.com/legalpwn-attack-genai-tools-misclassify-malware-safe-code/

Malware#infosecnews#redditGermany+6

Russia-linked APT Secret Blizzard targets foreign embassies in Moscow with ApolloShadow malware Source: https://securityaffairs.com/180638/apt/russia-linked-apt-secret-blizzard-targets-foreign-embassies-in-moscow-with-apolloshadow-malware.html

Malware#infosecnews#redditGermany+7

Hackers Use Facebook Ads to Spread JSCEAL Malware via Fake Cryptocurrency Trading Apps Source: https://thehackernews.com/2025/07/hackers-use-facebook-ads-to-spread.html

Malware#infosecnews#redditGermany+7

A new version of XWorm malware (version 6.0) has been discovered, showcasing advanced features for persistence and evasion. The infection chain begins with a VBScript that downloads and executes a PowerShell script. This script implements an AMSI bypass by modifying CLR.DLL in memory, then downloads and loads the XWorm binary. The latest version includes the ability to run as a critical process, preventing termination without admin privileges. It also introduces new anti-analysis techniques, such as terminating on Windows XP and detecting execution in data centers or hosting providers. The malware maintains its in-memory execution and continues to employ various evasion techniques.

Malware#persistence#xwormGermany+9

Critical SAP flaw exploited to launch Auto-Color Malware attack on U.S.company Source: https://securityaffairs.com/180562/malware/critical-sap-flaw-exploited-to-launch-auto-color-malware-attack-on-u-s-company.html

Malware#infosecnews#redditGermany+9

SAP NetWeaver Vulnerability Used in First Auto-Color Malware Attack on US Firm Source: https://hackread.com/sap-netweaver-vulnerability-auto-color-malware-us-firm/

Operation CargoTalon targets Russia’s aerospace with EAGLET malware, Source: https://securityaffairs.com/180378/intelligence/operation-cargotalon-targets-russias-aerospace-with-eaglet-malware.html

Malware#infosecnews#redditGermany+5

Koske, a new AI-Generated Linux malware appears in the threat landscape Source: https://securityaffairs.com/180355/malware/koske-a-new-ai-generated-linux-malware-appears-in-the-threat-landscape.html

Malware#infosecnews#redditGermany+6

Soco404 and Koske Malware Target Cloud Services with Cross-Platform Cryptomining Attacks Source: https://thehackernews.com/2025/07/soco404-and-koske-malware-target-cloud.html

Malware#infosecnews#redditGermany+8

Hacker sneaks infostealer malware into early access Steam game Source: https://www.bleepingcomputer.com/news/security/hacker-sneaks-infostealer-malware-into-early-access-steam-game/

Malware#infosecnews#redditGermany+7

Coyote malware is first-ever malware abusing Windows UI Automation Source: https://securityaffairs.com/180334/malware/coyote-malware-is-first-ever-malware-abusing-windows-ui-automation.html

Malware#infosecnews#redditGermany+7