Threats tagged 'malware'

AsyncRAT's Open-Source Code Sparks Surge in Dangerous Malware Variants Across the Globe Source: https://thehackernews.com/2025/07/asyncrats-open-source-code-sparks-surge.html

Malware#infosecnews#redditGermany+9

State-Backed HazyBeacon Malware Uses AWS Lambda to Steal Data from SE Asian Governments Source: https://thehackernews.com/2025/07/state-backed-hazybeacon-malware-uses.html

Malware#infosecnews#redditGermany+7

North Korean Hackers Flood npm Registry with XORIndex Malware in Ongoing Attack Campaign Source: https://thehackernews.com/2025/07/north-korean-hackers-flood-npm-registry.html

Malware#infosecnews#redditGermany+7

Interlock ransomware adopts FileFix method to deliver malware Source: https://www.bleepingcomputer.com/news/security/interlock-ransomware-adopts-filefix-method-to-deliver-malware/

Malware#infosecnews#redditGermany+9

Gigabyte motherboards vulnerable to UEFI malware bypassing Secure Boot Source: https://www.bleepingcomputer.com/news/security/gigabyte-motherboards-vulnerable-to-uefi-malware-bypassing-secure-boot/

Malware#infosecnews#redditGermany+9

Researchers from The DFIR Report, in partnership with Proofpoint, have identified a new and resilient variant of the Interlock ransomware group’s remote access trojan (RAT). This new malware, a shift from the previously identified JavaScript-based [Interlock RAT](https://blog.sekoia.io/interlock-ransomware-evolving-under-the-radar/) (aka [NodeSnake](https://www.quorumcyber.com/wp-content/uploads/2025/06/20250416-Higher-Education-Sector-RAT.pdf)), uses PHP and is being used in a widespread campaign.

Malware#netsec#redditGermany+9

DoNot APT Hits European Ministry with Fake Diplomacy Emails and LoptikMod Malware Source: https://hackread.com/donot-apt-hits-european-ministry-loptikmod-malware/

Malware#infosecnews#redditGermany+6

In the high-stakes arena of cybersecurity, Microsoft Defender stands as a cornerstone ofWindows security, integrating a sophisticated array of defenses: the Antimalware Scan Interface (AMSI) for runtime script scanning, Endpoint Detection and Response (EDR) forreal-time telemetry, cloud-based reputation services for file analysis, sandboxing for isolated execution, and machine learning-driven heuristics for behavioral detection. Despiteits robust architecture, attackers increasingly bypass these defenses—not by exploitingcode-level vulnerabilities within the Microsoft Security Response Center’s (MSRC) service boundaries, but by targeting logical vulnerabilities in Defender’s decision-makingand analysis pipelines. These logical attacks manipulate the system’s own rules, turningits complexity into a weapon against it.This article series, Strengthening Microsoft Defender: Analyzing and Countering Logical Evasion Techniques, is designed to empower Blue Teams, security researchers, threathunters, and system administrators with the knowledge to understand, detect, and neutralize these threats. By framing logical evasion techniques as threat models and providingactionable Indicators of Compromise (IoCs) and defensive strategies, we aim to bridgethe gap between attacker ingenuity and defender resilience. Our approach is grounded inethical research, responsible disclosure, and practical application, ensuring that defenderscan anticipate and counter sophisticated attacks without crossing legal or ethical lines.

Tool#netsec#redditGermany+9

DoNot APT Expands Operations, Targets European Foreign Ministries with LoptikMod Malware Source: https://thehackernews.com/2025/07/donot-apt-expands-operations-targets.html

Malware#infosecnews#redditGermany+9

Android malware Anatsa infiltrates Google Play to target US banks Source: https://www.bleepingcomputer.com/news/security/android-malware-anatsa-infiltrates-google-play-to-target-us-banks/

Malware#infosecnews#redditGermany+9

Pakistan’s APT36 Transparent Tribe Targets Indian Defense Sector with New Linux Malware Source: https://hackread.com/pakistan-transparent-tribe-indian-defence-linux-malware/

Malware#infosecnews#redditFrance+6

SEO Poisoning Campaign Targets 8,500+ SMB Users with Malware Disguised as AI Tools Source: https://thehackernews.com/2025/07/seo-poisoning-campaign-targets-8500.html

Malware#infosecnews#redditGermany+9

Malware Surge Hits Android: Adware, Trojans and Crypto Theft Lead Q2 Threats Source: https://hackread.com/android-malware-adware-trojan-crypto-theft-q2-threats/

Malware#infosecnews#redditGermany+6

I covered a fascinating post by Alexander Moch at ERNW about a boot-level Linux vulnerability that lets attackers inject code from the initramfs debug shell. Even with Secure Boot and encryption, a few key presses can drop you to a shell and allow persistent malware to be added. Luckily, the fix is simple and involves kernel parameters. I break it down here: https://nerds.xyz/2025/07/linux-initramfs-security-flaw-secure-boot-bypass/ Curious what others are doing to harden this layer.

Massive Android Fraud Operations Uncovered: IconAds, Kaleidoscope, SMS Malware, NFC Scams Source: https://thehackernews.com/2025/07/mobile-security-alert-352-iconads-fraud.html

Malware#infosecnews#redditGermany+7

N Korean Hackers Drop NimDoor macOS Malware Via Fake Zoom Updates Source: https://hackread.com/n-korean-hackers-nimdoor-macos-malware-fake-zoom-updates/

Malware#infosecnews#redditGermany+7

TA829 and UNK_GreenSec Share Tactics and Infrastructure in Ongoing Malware Campaigns Source: https://thehackernews.com/2025/07/ta829-and-unkgreensec-share-tactics-and.html

Malware#infosecnews#redditGermany+7

GIFTEDCROOK Malware Evolves: From Browser Stealer to Intelligence-Gathering Tool Source: https://thehackernews.com/2025/06/giftedcrook-malware-evolves-from.html

Malware#infosecnews#redditGermany+7

New Stealthy Remcos Malware Campaigns Target Businesses and Schools Source: https://hackread.com/remcos-malware-campaigns-hit-businesses-and-schools/

Malware#infosecnews#redditGermany+6

OneClik Malware Targets Energy Sector Using Microsoft ClickOnce and Golang Backdoors Source: https://thehackernews.com/2025/06/oneclik-malware-targets-energy-sector.html

Malware#infosecnews#redditGermany+7