Malware – Page 4 – ADMIN.FOUNDATION

Star Blizzard Targets 100+ Organizations with Phishing and RedFlick Technique

Russian group Star Blizzard expands phishing campaigns with a new malware delivery RedFlick technique, using scheduled tasks to deliver the CosmicPulse backdoor.

·

Callisto Group, CosmicPulse, Cyber Attack, Cyber-Attacks, cybersecurity, Malware, Phishing, RedFlick, Russia, Security, Star Blizzard, Ukraine, USA

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
GlassWorm Supply Chain Attack Hides Malware Inside VS Code Color Themes

A GlassWorm-linked software supply chain campaign has abused seemingly harmless Visual Studio Code color themes to distribute malicious loaders across the Visual Studio Marketplace and Open VSX Registry. The activity demonstrates how extensions designe…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Hackers Are Turning Trusted Software Updates Into Credential-Stealing Malware

A growing wave of supply-chain attacks is proving the opposite: attackers are compromising legitimate open-source packages and using trusted update channels to deploy credential-stealing malware directly into developer and enterprise environments. Mali…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
New CloudSyncD macOS Backdoor Uses Fake Zoom Installer to Steal Passwords

CloudSyncD macOS backdoor uses a fake Zoom installer to steal Mac passwords, bypass Gatekeeper and connect infected devices to remote C2 servers.

·

backdoor, CloudSyncD, cybersecurity, Jamf Threat Labs, jQuery, macOS, Malware, Security, Zoom

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
SC WordPress Malware Rebuilds Itself After Removal Using Database and Memory Persistence

A newly analyzed WordPress malware family, tracked as SC for the “SC_” markers embedded in its injected code, uses a self-healing persistence mesh that can restore a deleted backdoor within seconds. Researchers found that SC does not rely on a single w…

·

cyber security, Cyber Security News, Malware, Wordpress

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
New 2CLoader Malware Uses Anti-VM and API Hooking to Deliver Vidar and Remus Stealers

A new Windows malware loader, tracked as 2CLoader, that combines extensive anti-analysis logic, indirect system calls, API tampering, and flexible in-memory execution to deliver Vidar and Remus information stealers. Researchers also observed the loader…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
MALFEX npm Attack Spreads Windows RAT, Steals Discord and Browser Data

CloudSEK uncovered the MALFEX campaign using malicious npm packages to deploy Overlord RAT, steal Discord and browser data,…

·

Blockchain, CloudSEK, Cyber Attack, Cyber-Attacks, cybersecurity, MALFEX, Malware, Overlord, RAT, SCAM, Security, Solana, Supply Chain

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Global Group Ransomware Abuses WinMerge to Deploy Encryptor

Cofense researchers reveal how Global Group uses payment-themed phishing, malicious ISO files and WinMerge to deploy ransomware and extort large enterprises.

·

Black Lock, Cyber Attack, Cyber Crime, Cyber-Attacks, cybersecurity, Encryptor, GLOBAL GROUP, Malware, Mamona, Phishing, Ransomware, Security, WinMerge

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Android Malware Turns Gemini AI Into an Assistant for On-Device Attacks

A newly documented Android banking trojan named RATHat is demonstrating how generative AI can be operationalized inside mobile malware. The threat uses Google Gemini models to navigate unfamiliar Android interfaces, while its operator panel applies AI …

·

Android, cyber security, Cyber Security News, Malware

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
SectopRAT Malware Hides in Legitimate Software to Steal Browser Credentials and Crypto Wallets

A newly analyzed SectopRAT campaign demonstrates how threat actors can weaponize trusted application components to conceal a full-featured remote access trojan and steal high-value data. The investigation found no evidence that the software vendor dist…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

Category: Malware