Malware – ADMIN.FOUNDATION

New GhostBat Android Malware Targets 60 Banking and UPI Apps to Steal PINs

A new GhostBat RAT variant targets 60 Android financial application packages used in India, combining accessibility-based PIN capture with a transparent overlay that intercepts interactions inside legitimate Google Pay and MobiKwik interfaces. The find…

·

Android, cyber security, Cyber Security News, Malware

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
New ROMULUS Malware Platform Uses Six Servers to Deliver Multiple Malicious Payloads

ROMULUS, a shared ClickFix delivery platform operating across six identified servers, with confirmed routes distributing a trojanized Stardock package and LegionLoader. The discovery connects infrastructure from a recently documented ChatGPT Custom GPT…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Midnight Blizzard-Linked Malware Server Still Delivering Payloads 8 Weeks After Disclosure

A server linked to a malware campaign attributed to a Midnight Blizzard-associated cluster was still delivering malicious files on October 5, 2026. The server returned HTTP 200 responses for multiple payload paths, including one used by simple Windows …

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Android Malware Exposes Its Own Operators While Hijacking Phones and Stealing Sensitive Data

An Android remote-access Trojan, YuanKong, whose weakly protected dropper reveals more than its hidden payload: it exposes the operator account identifiers embedded in each build. Analysis of 110 droppers uncovered 57 distinct child payloads, 42 operat…

·

Android, cyber security, Cyber Security News, Malware

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Targeted Ads Used to Infect Al Jazeera Devices with Candiru Spyware

Citizen Lab found targeted ads delivered Candiru spyware to Al Jazeera devices without clicks, while the same ad…

·

Al Jazeera, Candiru, Citizen Lab, Confiant, Cyber Attack, Cyber-Attacks, cybersecurity, Discover-Tech, Integrity Labs, Israel, Malware, Privacy, Qatar, Security, spyware

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
New PEERSTITCH Malware Targets FortiGate Firewalls and Hides Inside System Memory

PEERSTITCH, a memory-resident ARM64 implant deployed against FortiGate firewalls during a prolonged intrusion into a telecommunications managed service provider. The malware hijacks legitimate FortiOS processes, leaving no persistent executable, openin…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
New ClickFix Attack Deploys Lorem Ipsum Malware Loader to Establish Remote Access

A ClickFix campaign uses the Lorem Ipsum Loader to install a Python-based tunneling implant, giving attackers a covert route into victims’ networks and potentially laying the groundwork for ransomware deployment. In an incident investigated in late Sep…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Anthropic Warns Small AI Models Could Power Self-Spreading AI Worms

Anthropic finds small AI models can set up inference servers across different hardware, raising concerns about future AI…

·

AI Models, AI Worms, Anthropic, Artificial Intelligence, Cyber Attack, cybersecurity, Gemma, Malware, Opus, Qwen, Security

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Hackers Target PuTTY Users With SEO Poisoning and Ethereum-Powered Malware

A search for PuTTY can lead to more than a fake download. In a campaign reported on October 12, attackers used search-engine optimization (SEO) poisoning to steer users to a counterfeit PuTTY site and deliver a trojanized Windows installer. The campaig…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
MS Teams Phishing, ClickFix and Shai-Hulud npm Attacks Dominate Threat Report

Ontinue’s 1H 2026 threat report shows attackers increasingly abusing Microsoft Teams, npm packages, device-code logins and blockchain ClickFix…

·

ClickFix, Cyber Attack, Cyber-Attacks, cybersecurity, Malware, Microsoft Teams, Ontinue, Phishing Scam, Security, Shai-hulud

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

Category: Malware