Technology ❯ Cybersecurity ❯ Threat Intelligence

Malware Analysis

Attribution Obfuscation Techniques ESET Research EvilTokens False Positives Android Trojans Zscaler Supply Chain Attacks Phishing Resistance Trojan Horses Exploit Detection Python-based Malware VirusTotal Destructive Malware Trojanized Utilities Cyber Espionage Microsoft Security AI in Cybersecurity Incident Response Threat Fabric Backdoor.Turn Android Trojan ChillyHell AI-Driven Malware Miasma Zimperium Research Jamf Reports Domain Scanning Aisuru Botnet Darktrace Herodotus Findings Acronis Vega Research AryStinger Attack Vectors Adversary Tactics Exploit Development SSL VPN Attacks Backdoor Capabilities Shai-Hulud Campaign Remote Access Trojans ClickFix Attacks Malwarebytes Research User Safety Credential Harvesting Trojan:Win32/CryptoBandits ESET

Typosquatted Rust Crate Delivered Build‑Time Backdoor

Removed from crates.io, the tainted releases leave developer machines at risk of credential theft with persistent backdoors.

Multi‑Stage Malware Found in Four AsyncAPI npm Packages

GigaWiper Backdoor Merges Spy Capabilities With Multiple Irreversible Wipers

ARToken Panel Identified as Full BEC‑as‑a‑Service Tied to EvilTokens

AryStinger Malware Hijacks 4,300+ Legacy Routers to Build Reconnaissance and Proxy Fleet

DragonForce Used Microsoft Teams Relays to Hide New Backdoor

Rust Stealer IronWorm and New Miasma Worm Infect Dozens of npm Packages

Red Hat npm Packages Backdoored to Deliver 'Miasma' Credential‑Stealing Worm

BTMOB Android RAT Sells Point‑and‑Click Builder for Full Device Takeover

Researcher Publishes YellowKey BitLocker Bypass and GreenPlasma Windows Exploit PoCs

Researchers Detail Deep#Door, a Stealthy Python Backdoor Hidden in a Windows Batch File

Adobe Reader Zero-Day Exploited for Months Through Malicious PDFs

CPUID Confirms Brief Website Hijack That Served Malware via CPU-Z and HWMonitor Links

Researchers Show Copilot and Grok Can Be Co‑opted as Covert Malware C2 Relays

Lumen Blocks 550+ Kimwolf/Aisuru Command Servers as Android TV Botnet Surpasses 2 Million Infections

Malicious 'Safery' Chrome Wallet Still Live, Steals Seed Phrases via Sui Microtransactions

New 'Herodotus' Android Banking Trojan Mimics Human Typing to Evade Detection as Campaigns Hit Italy and Brazil

Memento Labs CEO Confirms Dante Spyware Ownership After Chrome Zero-Day Campaign Exposed

Play Protect Now Blocking Evolving ‘ClayRat’ Android Spyware Targeting Russian Users

Akira Breaks Into MFA-Protected SonicWall VPNs in Ongoing Access Campaign