Hackers Exploit 24 IoT Vulnerabilities to Install ClingSTUN Linux Backdoor

Meet ClingSTUN, a new Linux backdoor that exploits IoT vulnerabilities, gives attackers remote command access and turns infected devices into proxy nodes.

·

backdoor, ClingSTUN, Cyber Attack, FortiGuard, IoT, Linux, Malware, Security, STUN, vulnerability

¶¶¶¶¶

New CloudSyncD macOS Backdoor Uses Fake Zoom Installer to Steal Passwords

CloudSyncD macOS backdoor uses a fake Zoom installer to steal Mac passwords, bypass Gatekeeper and connect infected devices to remote C2 servers.

·

backdoor, CloudSyncD, cybersecurity, Jamf Threat Labs, jQuery, macOS, Malware, Security, Zoom

¶¶¶¶¶

New TASK#STOMP Windows Backdoor Enables Continuous Document Theft

TASK#STOMP Windows backdoor uses PowerShell, scheduled tasks and runtime C# compilation to steal business documents and maintain remote access.

·

backdoor, cybersecurity, Malware, PowerShell, Security, Securonix, TASK#STOMP, Windows

¶¶¶¶¶

China-Linked FamousSparrow Deploys SparroWocky Backdoor in Latin America

FamousSparrow is targeting Latin American governments with SparroWocky, a new C++ backdoor that exfiltrates files, takes screenshots and evades security tools.

·

backdoor, China, Cyber Attack, Cyber-Attacks, cybersecurity, FamousSparrow, Latin America, Malware, Security, SparroWocky

¶¶¶¶¶

OctLurk and SilkLurk Windows Backdoors Target Governments in 6 Countries

Kaspersky links OctLurk and SilkLurk to cyberespionage attacks stealing passwords, emails and files from government systems in six countries since January 2025.

·

Afghanistan, backdoor, Central Asia, China, Cyber-Attacks, Kaspersky, Linux, LurkProxy, Malware, MystRodX, OctLurk, PlugX, Security, SilentRaid, SilkLurk, Syria, TrustFall, Windows, WinRAR

¶¶¶¶¶

Wordfence Finds Critical Backdoor in ARVE WordPress Plugin

A backdoored ARVE WordPress Plugin release could grant attackers administrator access with one token, but WordPress.org blocked automatic distribution to WordPress sites.

·

ARVE, backdoor, cybersecurity, Malware, Plugin, Security, vulnerability, Wordfence

¶¶¶¶¶

Siggen Backdoor Hits Windows Developers Via Infected Visual Studio Projects

Dr.Web details Siggen Windows backdoor that uses Steam for C2, steals credentials and crypto data and infects Visual Studio projects to spread among developers.

·

backdoor, cryptocurrency, cybersecurity, Malware, SCAM, Security, Siggen, Steam, Supply Chain, TROJAN, Visual Studio

¶¶¶¶¶

Microsoft Warns of GigaWiper Backdoor Built to Destroy Windows PCs

Microsoft details GigaWiper, a destructive Windows backdoor that can wipe disks, encrypt files and give attackers remote access to compromised systems globally.

·

backdoor, Crucio, cybersecurity, FlockWiper, GigaWiper, Malware, Microsoft, Security, Windows

¶¶¶¶¶

Woodgnat Hackers Use Mistic RAT to Broker Access for Ransomware Gangs

Woodgnat Hackers use Backdoor.Mistic, a stealthy RAT, to let brokers compromise networks and sell entry points to ransomware groups, putting firms at risk.

·

backdoor, Cyber Crime, cybersecurity, Malware, Mistic, Ransomware, RAT, Security, Woodgnat

¶¶¶¶¶

DragonForce Ransomware Abused Microsoft Teams to Hide Malware Activity

DragonForce ransomware abused Microsoft Teams relay systems to hide a custom backdoor, steal files and encrypt systems at a US services firm.

·

backdoor, BYOVD, Cyber Attack, Cyber-Attacks, cybersecurity, DragonForce, Malware, Microsoft, Microsoft Teams, Privacy, Ransomware, Security, vulnerability

¶¶¶¶¶

ADMIN.FOUNDATION

ADMIN.FOUNDATION

Category: backdoor