Malware – Page 54 – ADMIN.FOUNDATION

ToddyCat Malware Exploits ProxyLogon to Compromise Microsoft Exchange Servers

ToddyCat, a sophisticated cyber-espionage threat group also known as Websiic and Storm-0247, has emerged as a significant risk to organizations across Europe and Asia. The group’s operations, which began in December 2020 by targeting Microsoft Ex…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Millions of Android Powered TVs and Streaming Devices Infected by Kimwolf Botnet

Synthient discovers over 2 million Android TV boxes and smart TVs hijacked by the Kimwolf botnet. Learn how hackers are using home devices to launch DDoS attacks and how you can protect your home network.

·

Aisuru, Android, Android TV, Botnet, Cyber Attack, cybersecurity, Kimwolf, Malware, Security, TV Box, vulnerability

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
CloudEyE MaaS Downloader and Cryptor Infects Over 100,000 Users Globally

ESET Research has uncovered a significant surge in CloudEye malware detections, with a 30-fold increase in the second half of 2025. The security firm detected more than 100,000 infection attempts over the six months, signaling a widespread threat affec…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
New VVS Stealer Malware Targets Discord Users via Fake System Errors

Palo Alto Networks’ new report reveals VVS Stealer uses Discord Injection and fake error messages to steal tokens and MFA codes. Protect your account from this new Python-based threat.

·

cybersecurity, Discord, Infostealer, Malware, Palo Alto Networks, Security, VVS Stealer

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
RondoDox Botnet is Using React2Shell to Hijack Thousands of Unpatched Devices

RondoDox hackers exploit the React2Shell flaw in Next.js to target 90,000+ devices, including routers, smart cameras, and small business websites.

·

Botnet, Cyber Attack, cybersecurity, Malware, Mirai, Next.js, React2Shell, RondoDox, Security, vulnerability

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
RondoDoX Botnet Abuses React2Shell Vulnerability for Malware Deployment

CloudSEK has uncovered a sustained nine-month campaign by the RondoDoX botnet operation, revealing rapid exploitation of emerging vulnerabilities including the critical React2Shell vulnerability. Analysis of exposed command-and-control logs spanning Ma…

·

Botnet, cyber security, Cyber Security News, Malware

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Threat Actors Test a Highly Obfuscated, Modified Variant of the Shai Hulud Malware

Security researchers have identified what appears to be the first instance of a newly modified Shai Hulud malware strain uploaded to the npm registry approximately 30 minutes ago, disguised within the package @vietmoney/react-big-calendar. The discover…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
GlassWorm Malware Turns VS Code Extensions into an Attack Vector Against macOS

GlassWorm has returned with a dangerous new evolution. The notorious self-propagating malware, which first surfaced in October as an invisible Unicode-based threat in VS Code extensions, has completed a significant platform pivot to macOS with 50,000 d…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
DarkSpectre Malware Campaign Hits Chrome, Edge, and Firefox Users

A sophisticated Chinese threat actor dubbed DarkSpectre has compromised 8.8 million users across Chrome, Edge, and Firefox through three distinct malware campaigns that have operated undetected for over seven years, researchers revealed today. The oper…

·

Chrome, cyber security, Cyber Security News, Firefox, Malware

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
HoneyMyte (aka Mustang Panda) Deploys ToneShell Backdoor in New Attacks

HoneyMyte (Mustang Panda) is back with a new ToneShell backdoor. Read how this stealthy attack blinds Microsoft Defender to target government entities in Asia.

·

backdoor, Bronze President, Cyber Attack, cybersecurity, East Asia, HoneyMyte, Kaspersky, Malware, Mustang Panda, Myanmar, Securelist, Security, South Asia, Thailand, ToneShell

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

Category: Malware