Technology ❯ Cybersecurity ❯ Malware

Threat Actors

North Korea TeamPCP Exploitation Techniques TA416 Group UNC6384 GrayBravo Ghostwriter BlackSanta EDR Killer Storm-2460 VoidLink

GREYVIBE: AI-Assisted Russian‑Language Hackers Target Ukraine, WithSecure Reports

WithSecure's late May 2026 analysis shows generative models were used to scale convincing phishing lures and bespoke malware.

CloudZ Malware Hijacks Microsoft Phone Link to Steal SMS Codes and Credentials

Harvester’s Linux GoGra Backdoor Hides C2 in Microsoft Graph and Outlook

Researchers Uncover ZionSiphon Malware Aimed at Israeli Water Systems

Microsoft Exposes SEO-Poisoned Fake VPN Installers That Steal Enterprise Credentials

Aryaka Uncovers ‘BlackSanta’ Malware That Kills EDR in Year-Long HR Resume Campaign

Zscaler Ties North Korea’s APT37 to ‘Ruby Jumper’ Using Zoho WorkDrive and USB Malware to Breach Air‑Gapped Networks

Microsoft Details ClickFix Variant Using DNS Lookups to Stage Malware

Mandiant Links AI-Driven Crypto Theft to North Korea’s UNC1069 With Seven macOS Malware Families

Cisco Talos Unmasks 'DKnife' AitM Framework Tied to China Since 2019

ESET Details 'EdgeStepper' Implant Used by China-Aligned PlushDaemon to Hijack Software Updates

North Korea-Linked KONNI Turns Google Find Hub Into Remote-Wipe Weapon in South Korea

China-Linked UNC6384 Exploits Unpatched Windows Shortcut Flaw to Spy on European Diplomats

Kaspersky Exposes 'GhostCall' and 'GhostHire' Targeting Crypto Firms, Tied to BlueNoroff

Unit 42 Names 'Phantom Taurus,' China-Aligned Spy Group Targeting Governments Across Africa, the Middle East and Asia

ESET: North Korea’s Developer Lures Add AkdoorTea and Feed Stolen Data to IT Workers

North Korea-Linked Impostors Use Fake Crypto Recruiting to Push BeaverTail Malware

Attackers Exploit ActiveMQ Flaw, Deploy DripDropper, Then Patch the Hole

Researchers Detail PipeMagic Backdoor Using Fake ChatGPT App and CLFS Exploit

PS1Bot Malware Framework Continues Evolving Through Malvertising to Target Crypto Wallets