ARTEX is an open-source autonomous penetration testing framework released in July 2026 that uses large language model (LLM) driven AI agents to automate reconnaissance, exploitation, and data exfiltration with minimal human intervention. As of November 2026, over 1,400 exposed ARTEX consoles are active globally. The framework has been linked to attacks on South Korean financial institutions and a supply chain compromise involving ConnectWise. Operators often expose directories containing exploit binaries and post-exploitation tools. The developer removed the repository after public attribution, but archived copies remain in circulation.
The npm package '@kora20030101/test-pkg-delete-me' contains malicious code that compromises any computer on which it is installed or running. Installation of this package can lead to full system compromise, including unauthorized access to secrets and keys stored on the affected machine. Immediate removal of the package is recommended, but due to the extent of the compromise, complete remediation may require rotating all secrets and keys from a different, uncompromised system.
The npm package @exclipz/baileys contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removing the package alone does not guarantee removal of all malicious software, as the attacker may have gained full control of the system.
The @exclipz/bails npm package contains malicious code that can fully compromise any computer on which it is installed or running. Due to the potential for complete system takeover, all secrets and keys stored on the affected machine should be rotated immediately from a separate, uncompromised device. Removing the package alone does not guarantee removal of all malicious software introduced by its installation.
The talk-lang package on npm contains malicious code that compromises any computer on which it is installed or run. The compromise is severe enough that all secrets and keys stored on the affected machine should be rotated immediately from a different, secure computer. Removal of the package alone does not guarantee elimination of all malicious software introduced by it.
The plain-lang npm package contains malicious code that compromises any computer on which it is installed or running. This compromise potentially grants full control to an outside entity, risking exposure of all secrets and keys stored on the affected system. Immediate removal of the package and rotation of all secrets from a different, uncompromised machine is strongly advised.
The npm package 'test1817' contains malicious code that can fully compromise any computer on which it is installed or running. The compromise includes potential unauthorized access to all secrets and keys stored on the affected system. Removal of the package alone may not eliminate all malicious software, as the attacker may have established persistent control.
The @gemshell/win32-x64 npm package version 1.2.1 contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, secure machine. Removal of the package does not guarantee the elimination of all malicious software introduced by it, as full control of the system may have been granted to an attacker.
VOLTA is a sophisticated Windows infostealer malware that uses AI to automate the analysis and prioritization of stolen victim data for cybercriminals. It collects credentials, sessions, and cryptocurrency wallets, then uses large language models to rank assets by monetization value, enriching data with stolen session access and email content. This automation reduces the manual effort attackers need to monetize stolen data and enables even low-level actors to bypass security controls and prioritize high-value targets. Organizations are advised to implement application control policies to detect suspicious Chrome headless processes, secure credential storage, revoke compromised tokens, change passwords, and treat exposed cryptocurrency wallets as fully compromised.
The dsh-purge package version 1.2.1 on npm contains malicious code that compromises any computer on which it is installed or running. The compromise is severe enough that all secrets and keys stored on the affected system should be rotated immediately from a different, trusted machine. Removing the package alone does not guarantee removal of all malicious software introduced by it.
CWPdoor is a sophisticated passive backdoor targeting Control Web Panel (CWP), a Linux server management control panel. It embeds malicious code into the legitimate cwpsrv binary and activates only upon receiving specially crafted HTTP requests with cryptographic signatures. The backdoor executes remote commands while suppressing access logs, leaving no forensic evidence. First observed in June 2026, it has evaded detection by security vendors and has been linked to a real-world victim in Brazil. It uses RSA signature verification and AES-256-CBC encryption for command and control communications via Unix domain sockets, making detection difficult.
In October 2026, a U.S. organization was targeted by the Anubis ransomware operation, which deployed a new custom backdoor named Lindnor. This backdoor disguised itself as legitimate Chrome and VMware components on Microsoft SQL Server machines. The attackers used multiple executables to terminate security services by exploiting five known vulnerable drivers via BYOVD techniques. They also installed the AnyDesk remote access tool with Safe Mode persistence to maintain access despite security software disruptions. Although the attackers established extensive persistence and evasion mechanisms, the ransomware encryption payload was blocked before it could execute. Anubis ransomware, operated by the Hawkmoth group as ransomware-as-a-service, has targeted numerous victims, predominantly in the United States.
The 'mcp-teamviewer' package on PyPI (version 0.0.1) is identified as malicious. Installing or importing this package causes it to exfiltrate basic information such as the host's IP address and username. The package overrides the installation command to execute this malicious code and communicates with a domain linked to malicious activity. The package serves no legitimate purpose beyond this data exfiltration.
The 'teamviewer-mcp-server' package version 0.0.1 on PyPI has been identified as malicious by the OpenSSF Package Analysis project. The package is flagged due to its communication with a domain linked to malicious activity. No CVSS score or detailed technical impact is provided.
Between March and September 2026, the Mirax malware infected thousands of Android devices in the META region, causing millions in estimated financial losses. Distributed via malicious ads in low-reputation streaming apps on Google Play, Mirax impersonates Google Play Services using Cyrillic characters and tricks victims into granting Accessibility Service permissions, enabling full device takeover. It uses server-side configuration with dual-WebSocket command-and-control infrastructure and DNS-over-HTTPS. The malware dynamically pushes phishing templates targeting over 20 regional banks and digital wallets. Attackers remotely control infected devices in real time to perform unauthorized transactions that appear legitimate, with stolen funds transferred to suspected mule accounts in India. The campaign peaked during Eid holidays and remains active.
Phexia is a modular macOS malware actively distributed since late 2025 via ClickFix campaigns. It uses a multi-stage infection chain involving Terminal commands, shell scripts, LaunchAgents persistence, and AppleScript loaders. In May 2026, its operators shifted command-and-control to Polygon blockchain smart contracts. The malware steals credentials through fake password prompts, extracts browser data, keychain items, password manager data, and deploys an XMRig cryptominer. Multiple builds communicate with rotating infrastructure, and reinfections may result in concurrent infections on the same device.
In 2025, threat actors exploited two vulnerabilities (CVE-2025-53770 and CVE-2025-53771) in on-premises Microsoft SharePoint to achieve remote code execution. The attackers used a fileless webshell framework running entirely in memory within the IIS worker process, avoiding disk writes. The intrusion was staged with initial fingerprinting followed by full exploitation, leading to deployment of Warlock ransomware. Post-exploitation included reconnaissance, privilege escalation via token impersonation, persistence, command execution with Velociraptor, tunneling, and attempts to disable EDR solutions using vulnerable drivers.
The PC launcher for the game "Goddess of Victory: NIKKE" was compromised via a supply chain attack involving tampered script files on the official CDN between September 27 and November 4, 2026. The altered scripts installed a remote access agent named K2F capable of executing arbitrary commands and stealing credentials from browsers, cryptocurrency wallets, and cloud services. The malware persisted by injecting a DLL into Chrome to intercept wallet recovery phrases. The initial compromise stemmed from domain hijacking of insightjs.com. The vendor detected and remediated the issue by replacing files and deploying automated detection and removal on November 5. Users who ran the Windows PC launcher during the compromise window were potentially affected.
In October 2026, attackers linked to North Korea's TraderTraitor operation stole approximately $6.34 billion from Binance through a sophisticated multi-stage supply chain compromise. The attack began with a fake job interview that tricked engineers into downloading trojanized developer tools, including a weaponized Terraform provider. Malicious backdoors named FLATROOF and ROOFDECK were embedded within legitimate-looking developer software, enabling lateral movement from compromised developer workstations to Binance's wallet signing infrastructure. ReversingLabs detected these malicious components 77 days before public disclosure, highlighting the advanced nature of the threat targeting DevOps environments.
Ahead of the Grand Theft Auto VI release on November 19, 2026, threat actors are exploiting consumer excitement through phishing campaigns and fraudulent schemes. These campaigns use fake downloads, false early access offers, nonexistent mobile versions, and free game promises to lure victims. Malicious sites distribute trojans, request cryptocurrency payments, use content lockers requiring survey completion, and harvest personal information. Tactics include fake storefronts impersonating Rockstar Games, fraudulent APK files with unsafe permissions, and giveaway scams with urgency counters. Post-launch threats are expected to include in-game currency fraud, credential phishing for Rockstar and gaming platform accounts, and malware through fake cheats and modifications.
