Hackers turn ScreenConnect into malware using Authenticode stuffing
Source: https://www.bleepingcomputer.com/news/security/hackers-turn-screenconnect-into-malware-using-authenticode-stuffing/
New WordPress Malware Hides on Checkout Pages and Imitates Cloudflare
Source: https://hackread.com/wordpress-malware-checkout-pages-imitates-cloudflare/
APT28 Uses Signal Chat to Deploy BEARDSHELL Malware and COVENANT in Ukraine
Source: https://thehackernews.com/2025/06/apt28-uses-signal-chat-to-deploy.html
New Android Malware Surge Hits Devices via Overlays, Virtualization Fraud and NFC Theft
Source: https://thehackernews.com/2025/06/new-android-malware-surge-hits-devices.html
N. Korean Hackers Deploy New PylangGhost Malware in Fake Crypto and Blockchain Job Interviews
Source: https://hackread.com/n-korean-hackers-pylangghost-malware-crypo-job-scam/
1,500+ Minecraft Players Infected by Java Malware Masquerading as Game Mods on GitHub
Source: https://thehackernews.com/2025/06/1500-minecraft-players-infected-by-java.html
Over 269,000 Websites Infected with JSFireTruck JavaScript Malware in One Month
Source: https://thehackernews.com/2025/06/over-269000-websites-infected-with.html
An investigation into VexTrio, a malicious traffic distribution system (TDS), revealed surprising connections between WordPress hackers and adtech companies. When VexTrio's operations were disrupted, multiple malware actors migrated to a new TDS that was discovered to be related to VexTrio. Several commercial TDSs were found to share software elements with VexTrio and benefit from its relationship with website malware actors. The investigation uncovered a complex network of adtech firms, including Partners House, BroPush, and RichAds, that use similar technologies and tactics to distribute malicious content. These firms have information about the identities of malware actors, which could potentially lead to their disruption.
Hi - we are looking for some feedback further to our new document sharing/anti-virus/secure communications website GetSafeDocs.com. We are based in Canada so follow Canadian privacy legislation / bound by Canadian legal standards. The goal of the site is to provide an affordable platform to help folks send documents securely and avoid the pitfalls of email. One of the sites features is it scans documents for any malware and the receiving side can preview the documents in a sandbox before downloa
New Supply Chain Malware Operation Hits npm and PyPI Ecosystems, Targeting Millions Globally
Source: https://thehackernews.com/2025/06/new-supply-chain-malware-operation-hits.html
Hi all, I discovered suspicious behavior and possible malware in a file related to the official MicroDicom Viewer installer. I’ve documented everything including hashes, scan results, and my analysis in this public GitHub repository:
[https://github.com/darnas11/MicroDicom-Incident-Report](https://github.com/darnas11/MicroDicom-Incident-Report)
Feedback and insights are very welcome!