Malware – Page 6 – ADMIN.FOUNDATION

Fake Crypto Wallet App Delivers PamStealer Malware That Hijacks Mac Credentials

A new variant of the macOS infostealer PamStealer is being distributed through a fake cryptocurrency wallet application, using a server-assisted decryption chain and Swift-based payload to steal credentials, browser data, Keychain items and sensitive u…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Exvicy ClickFix Malware-as-a-Service Copies ErrTraffic to Hijack WordPress Sites

A new Malware-as-a-Service platform, Exvicy, is actively abusing compromised WordPress websites to deliver ClickFix lures disguised as Cloudflare Turnstile verification pages. Researchers at Sekoia assess with high confidence that the service is a copy…

·

cyber security, Cyber Security News, Malware, Wordpress

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Cybercriminals Abandon Domains but Keep the Hosting Networks Behind Malware Campaigns

Cybercriminals are rapidly rotating lure domains, cloud storage buckets and command-and-control channels, but one infrastructure component is proving far harder to replace: the bulletproof hosting network that delivers the initial fake verification pag…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Graphalgo Malware Uses Malicious Terraform Providers and Go Modules to Deploy RAT

A threat actor linked to the ongoing Graphalgo software supply-chain campaign has expanded beyond npm and PyPI, using malicious Terraform providers and Go modules to deliver a targeted Go-based remote access trojan (RAT). The activity is significant be…

·

cyber security, Cyber Security News, Malware

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Fake TV Streaming Ads Deliver StreamRat Malware for Remote Android Device Hijacking

StreamRat, a newly identified Android banking trojan distributed through deceptive Meta and TikTok advertisements impersonating a free television-streaming service. The campaign, tracked as “Steamtv Esp.,” primarily targeted Spanish-speaking Android us…

·

Android, cyber security, Cyber Security News, Malware

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Researchers Find Malware That Uses AI Models Instead of Human Hackers for Control

A Windows malware implant named CLOSEDQUORUM that uses commercial large language models as an autonomous command-and-control layer, shifting tactical decisions from a human operator to an AI-driven voting system. The sample has not been confirmed in ac…

·

AI, cyber security, Cyber Security News, Malware

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
Stealthy WordPress Malware Uses Must-Use Plugin and Ethereum EtherHiding for Persistent Backdoor Access

A newly analyzed WordPress malware implant combines must-use plugin persistence, hidden administrator accounts, credential theft, cross-site propagation, and Ethereum-based EtherHiding to create an unusually resilient backdoor. The malicious code masqu…

·

cyber security, Cyber Security News, Malware, Word press

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
RatHat Android Malware Uses AI to Target Banking Credentials in Real Time

RatHat Android malware uses generative AI to navigate infected devices, steal banking credentials, intercept OTP codes and reinstall itself after removal again.

·

AI, Android, cybersecurity, Malware, Privacy, RatHat, Security, Zimperium, zLabs

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
MovieReaper Malware Uses The Odyssey Torrents to Infect Users Worldwide

MovieReaper malware spreads through compromised Odyssey torrents, infecting hundreds of victims while using Solana to locate command-and-control infrastructure.

·

cybersecurity, HEUR:Trojan.Win64.Agent.gen, Kaspersky, Malware, MovieReaper, Movies, Odyssey, Piracy, Scams and Fraud, Security, Torrents

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶
New TASK#STOMP Windows Backdoor Enables Continuous Document Theft

TASK#STOMP Windows backdoor uses PowerShell, scheduled tasks and runtime C# compilation to steal business documents and maintain remote access.

·

backdoor, cybersecurity, Malware, PowerShell, Security, Securonix, TASK#STOMP, Windows

¶¶¶¶¶

¶¶¶¶¶

¶¶¶¶¶

Category: Malware