Threats tagged 'malware'

New Koske Linux malware hides in cute panda images Source: https://www.bleepingcomputer.com/news/security/new-koske-linux-malware-hides-in-cute-panda-images/

Malware#infosecnews#redditGermany+8

CastleLoader Malware: Fake GitHub and Phishing Attack Hits 469 Devices Source: https://catalyst.prodaft.com/public/report/understanding-current-castleloader-campaigns/overview

Malware#netsec#redditGermany+6

NPM package ‘is’ with 2.8M weekly downloads infected devs with malware Source: https://www.bleepingcomputer.com/news/security/npm-package-is-with-28m-weekly-downloads-infected-devs-with-malware/

Malware#infosecnews#redditGermany+7

Lumma infostealer malware returns after law enforcement disruption Source: https://www.bleepingcomputer.com/news/security/lumma-infostealer-malware-returns-after-law-enforcement-disruption/

Malware#infosecnews#redditGermany+6

Coyote in the Wild: First-Ever Malware That Abuses UI Automation Source: https://www.akamai.com/blog/security-research/active-exploitation-coyote-malware-first-ui-automation-abuse-in-the-wild

Malware#netsec#redditGermany+5

Coyote malware abuses Windows accessibility framework for data theft Source: https://www.bleepingcomputer.com/news/security/coyote-malware-abuses-windows-accessibility-framework-for-data-theft/

Malware#infosecnews#redditGermany+9

Iran-Linked DCHSpy Android Malware Masquerades as VPN Apps to Spy on Dissidents Source: https://thehackernews.com/2025/07/iran-linked-dchspy-android-malware.html

Malware#infosecnews#redditGermany+6

Fake npm Website Used to Push Malware via Stolen Token, Multiple Packages Impacted Source: https://hackread.com/fake-npm-website-used-push-malware-via-stolen-token/

Malware#infosecnews#redditGermany+7

New GhostContainer Malware Hits High-Value MS Exchange Servers in Asia Source: https://hackread.com/new-ghostcontainer-malware-ms-exchange-servers-asia/

Malware#infosecnews#redditGermany+6

SquidLoader Malware Campaign Hits Hong Kong Financial Firms Source: https://hackread.com/squidloader-malware-hits-hong-kong-financial-firms/

Malware#infosecnews#redditGermany+6

Malware Injected into 5 npm Packages After Maintainer Tokens Stolen in Phishing Attack Source: https://thehackernews.com/2025/07/malware-injected-into-6-npm-packages.html

Malware#infosecnews#redditGermany+7

Arch Linux pulls AUR packages that installed Chaos RAT malware Source: https://www.bleepingcomputer.com/news/security/arch-linux-pulls-aur-packages-that-installed-chaos-rat-malware/

Malware#infosecnews#redditGermany+6

LameHug: first AI-Powered malware linked to Russia’s APT28 Source: https://securityaffairs.com/180092/apt/lamehug-first-ai-powered-malware-linked-to-russias-apt28.html

Malware#infosecnews#redditGermany+7

Years Long Linux Cryptominer Spotted Using Legit Sites to Spread Malware Source: https://hackread.com/linux-cryptominer-using-legit-sites-to-spread-malware/

Malware#infosecnews#redditGermany+8

Microsoft Teams voice calls abused to push Matanbuchus malware Source: https://www.bleepingcomputer.com/news/security/microsoft-teams-voice-calls-abused-to-push-matanbuchus-malware/

Malware#infosecnews#redditGermany+8

SquidLoader Malware Campaign Targets Hong Kong Financial Sector Source: https://www.infosecurity-magazine.com/news/squidloader-malware-targets-hong/

Malware#infosecnews#redditGermany+6

An ongoing social engineering campaign is targeting cryptocurrency users through fake startup companies impersonating AI, gaming, and Web3 firms. The scammers create elaborate facades using spoofed social media accounts and project documentation on platforms like Notion and GitHub. They contact victims offering to pay them to test software, which is actually malware designed to steal crypto wallet contents. The campaign uses both Windows and macOS malware, including information stealers like Atomic Stealer. The threat actors go to great lengths to appear legitimate, even creating fake conference photos and merchandise stores. Multiple fake company identities have been identified as part of this campaign.

Malware#impersonation#social engineeringUnited Kingdom+6

Fake Telegram Apps Spread via 607 Domains in New Android Malware Attack Source: https://hackread.com/fake-telegram-apps-domains-android-malware-attack/

Malware#infosecnews#redditGermany+7

Android malware Konfety uses malformed APKs to evade detection Source: https://www.bleepingcomputer.com/news/security/android-malware-konfety-uses-malformed-apks-to-evade-detection/

Malware#infosecnews#redditGermany+7

Deriv security team recently uncovered a macOS malware campaign targeting developers - using a fake Homebrew install script, a malicious Google ad, and a spoofed GitHub page. Broken down in the blog Worth a read.

Malware#netsec#redditGermany+6