Malware – Page 52 – ADMIN.FOUNDATION

New CastleLoader Variant Linked to 469 Infections Across Critical Sectors

ANY.RUN report reveals how the new CastleLoader malware targets US government agencies using stealthy ClickFix tricks and memory-based attacks to bypass security.

·

ANY.RUN, backdoor, CastleLoader, Cyber Attack, cybersecurity, Malware, Security

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
New China Linked VoidLink Linux Malware Targets Major Cloud Providers

Researchers have discovered VoidLink, a sophisticated new Linux malware framework designed to infiltrate AWS, Google Cloud, and Azure. Learn how this Chinese-affiliated toolkit uses adaptive stealth to stay hidden.

·

Alibaba, AWS, Azure, China, cloud, Cyber Attack, Cyber Crime, cybersecurity, Google Cloud, Malware, Security, Tencent, VoidLink

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
CastleLoader Malware Targets U.S. Government Agencies

Security researchers are sounding the alarm over CastleLoader, a stealthy first-stage malware loader now implicated in campaigns targeting US-based government entities and multiple high-value industries. According to a recent deep-dive by ANY.RUN’s mal…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Charity-Themed Malware Used by Threat Actors to Target Ukraine’s Defense Forces

Ukrainian cybersecurity authorities have uncovered a sustained, targeted campaign against Ukraine’s defense forces, orchestrated by Russian-affiliated threat actors that disguise malware distribution as charitable donation requests. Between Octob…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Widespread Magecart Campaign Targets Users of All Major Credit Cards

Researchers at Silent Push have exposed a global Magecart campaign stealing credit card data since 2022. Learn how this invisible web-skimming attack targets major networks like Mastercard and Amex, and how to stay safe.

·

Cyber Attack, cybersecurity, magecart, Malware, Security, Silent Push, Skimmer

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
PowerShell-Driven Multi-Stage Windows Malware Using Text Payloads

Security researchers have identified a sophisticated multi-stage malware campaign dubbed SHADOW#REACTOR that chains together obfuscated Visual Basic Script (VBS) execution, resilient PowerShell stagers, text-only payload delivery mechanisms, and .NET R…

·

cyber security, Cyber Security News, Malware, Windows

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Android Banking Malware deVixor Actively Targeting Users with Ransomware Capabilities.

A sophisticated Android banking trojan known as deVixor has emerged as a significant threat to mobile users, combining financial data theft, device surveillance, and ransomware capabilities into a single malicious platform. Active since October 2025, t…

·

Android, cyber security, Cyber Security News, Malware

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Q4 2025 Malware Trends: Telegram Backdoor, Banking Trojans Surge, Joker Returns to Google Play

Telegram mods spread a powerful Android backdoor as banking trojans surge and Joker malware resurfaces on Google Play in Q4 2025, says Doctor Web.

·

Android, backdoor, cybersecurity, Joker, Malware, SCAM, Security, Telegram, Telegram X, TROJAN

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Russian BlueDelta (Fancy Bear) Uses PDFs to Steal Logins in Just 2 Seconds

New research from Recorded Future reveals how Russian state hackers (BlueDelta) are using fake Microsoft and Google login portals to steal credentials. The campaign involves using legitimate PDF lures from GRC and EcoClimate to trick victims.

·

BlueDelta, Cyber Attack, cybersecurity, europe, Fancy Bear, Iran, Israel, Malware, Russia, Security, Turkiye

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Fake Employee Reports Spread Guloader and Remcos RAT Malware

Scammers are using fake October 2025 performance reviews to trick staff into installing Guloader and Remcos RAT malware. Learn how to identify this threat and protect your personal data from remote hackers.

·

cybersecurity, Employee, Fraud, Guloader, Malware, RAT, Remcos, SCAM, Security

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

Category: Malware