Malware

NPM Package Tests AI Malware Scanner Evasion

• Malware

NPM Package Tests AI Malware Scanner Evasion

Do Son June 21, 2026 0

A new npm package uses prompt injection and token flooding for AI malware scanner evasion. Discover how attackers disrupt AI-assisted malware review.

GlassWASM Malware Hidden in Open VSX Extensions

• Malware

GlassWASM Malware Hidden in Open VSX Extensions

Do Son June 20, 2026 0

GlassWASM malware hides WebAssembly payloads in trojanized Open VSX extensions, abusing Solana memos for stealthy command-and-control.

Interlock and Rhysida Ransomware: IBM X-Force Maps a Shared Ecosystem

• Malware

Interlock and Rhysida Ransomware: IBM X-Force Maps a Shared Ecosystem

Do Son June 19, 2026 0

IBM X-Force links the Interlock and Rhysida ransomware ecosystem through shared malware like Supper, NodeSnake, and overlapping crypters.

APT37 NarwhalRAT Malware: A Python Backdoor Threat

• Malware

APT37 NarwhalRAT Malware: A Python Backdoor Threat

Do Son June 19, 2026 0

Discover how APT37 NarwhalRAT malware uses MS-themed phishing and a dead-drop C2 to target users with a sophisticated Python backdoor.

AsyncRAT AI Lures Target Users Hunting AI Skills

• Malware

AsyncRAT AI Lures Target Users Hunting AI Skills

Do Son June 18, 2026 0

FortiGuard Labs uncovered AsyncRAT AI lures using fake AI guides and an AutoHotkey loader to inject a stealthy .NET RAT into memory.

Khmer Shadow Espionage Campaign Targets Cambodian Government

• Malware

Khmer Shadow Espionage Campaign Targets Cambodian Government

Do Son June 18, 2026 0

Acronis reveals Khmer Shadow, a new espionage campaign using NIGHTFORGE loader and DLL sideloading to target Cambodian government entities with Havoc Demon.

GoFlateLoader: The Bloated Golang Malware Smuggling Infostealers Past Scanners

• Malware

GoFlateLoader: The Bloated Golang Malware Smuggling Infostealers Past Scanners

Do Son June 17, 2026 0

GoFlateLoader malware, a Golang loader, uses a giant PE overlay to evade scanners and deliver infostealers like Lumma, Vidar, and StealC.

JDY Botnet Resurges: China-Nexus IoT Army Hunts New Vulnerabilities Within Hours

• Malware

JDY Botnet Resurges: China-Nexus IoT Army Hunts New Vulnerabilities Within Hours

Do Son June 17, 2026 0

The JDY botnet, a China-nexus IoT network tied to Volt Typhoon, now spans 1,500+ devices and scans for new bugs like CVE-2026-35616 within hours.

Mastra Supply Chain Attack Compromises 140+ npm Packages

• Malware

Mastra Supply Chain Attack Compromises 140+ npm Packages

Do Son June 17, 2026 0

A Mastra supply chain attack compromised 140+ npm packages, using the typosquatted easy-day-js dependency to drop a crypto-stealing infostealer.

SilabRAT Malware: The $5,000-a-Month Crypto-Hunting RAT Hiding Behind HijackLoader

• Malware

SilabRAT Malware: The $5,000-a-Month Crypto-Hunting RAT Hiding Behind HijackLoader

Do Son June 17, 2026 0

SilabRAT malware, aka SnappyClient, is a $5K/month MaaS RAT flagged as HijackLoader. It uses HVNC and cracks crypto wallets, per Group-IB.

ShapedPlugin Supply Chain Attack Exposes WordPress Sites

• Malware
• Vulnerability Report

ShapedPlugin Supply Chain Attack Exposes WordPress Sites

Do Son June 16, 2026 0

A ShapedPlugin supply chain attack (CVE-2026-10735) injected malware into WordPress Pro plugins. Discover the impact and how to protect your site today.

UNK_DeadDrop Phishing Campaigns Target Developers

• Malware

UNK_DeadDrop Phishing Campaigns Target Developers

Do Son June 16, 2026 0

UNK_DeadDrop phishing campaigns are targeting developers with fake jobs to deliver Overlord malware. Learn how to defend against this North Korean threat.

Fluffy Wolf Phishing Attacks Push PowerLoader Malware

• Malware

Fluffy Wolf Phishing Attacks Push PowerLoader Malware

Do Son June 16, 2026 0

Discover how Fluffy Wolf phishing attacks target Russian organizations with the new PowerLoader malware to deploy PureRAT and Pay2Key ransomware.

Inside the Stealthy Agent Tesla Infection Chain

• Malware

Inside the Stealthy Agent Tesla Infection Chain

Do Son June 16, 2026 0

Discover how a simple phishing email triggers a complex Agent Tesla infection chain, using process injection and in-memory loading to steal sensitive data.

MLTBackdoor Malware Family Fuels Ransomware Attacks

• Malware

MLTBackdoor Malware Family Fuels Ransomware Attacks

Do Son June 16, 2026 0

Discover how the new MLTBackdoor malware family uses the ClickFix infection chain to establish footholds for ransomware attacks and lateral movement.

X-VPN Installer Hijacked to Spread STX RAT Malware

• Malware

X-VPN Installer Hijacked to Spread STX RAT Malware

Do Son June 15, 2026 0

Howler Cell exposes an X-VPN DLL sideloading campaign delivering STX RAT via 11 trojanized installers targeting crypto and VPN users.

Malicious Chrome Extensions Exposed in Mass Production Traffic Fraud Scheme

• Malware

Malicious Chrome Extensions Exposed in Mass Production Traffic Fraud Scheme

Do Son June 13, 2026 0

Discover how malicious Chrome extensions engage in traffic laundering while lying to users about collecting data on the official store.

Operation TaxShadow: Tax Phishing Hides In-Memory Malware

• Malware

Operation TaxShadow: Tax Phishing Hides In-Memory Malware

Do Son June 12, 2026 0

Operation TaxShadow uses fake tax notices to spread in-memory tax phishing malware with WebSocket C2, per CYFIRMA's new report.

VerdantBamboo Malware Campaign Targets Edge Devices via Supply Chain Breach

• Cyber Security
• Malware

VerdantBamboo Malware Campaign Targets Edge Devices via Supply Chain Breach

Do Son June 10, 2026 0

Discover how the stealthy VerdantBamboo malware campaign infiltrates network edge devices in this comprehensive Volexity threat report.

COXMO Botnet Variant: New Advanced Threat Exploits Router Firmware

• Malware

COXMO Botnet Variant: New Advanced Threat Exploits Router Firmware

Do Son June 10, 2026 0

Read the latest Gafgyt malware analysis revealing how the dangerous COXMO botnet variant spreads via standalone scripts.

Havoc Stager Campaign Exploits Fake Invoices to Compromise Networks

• Malware

Havoc Stager Campaign Exploits Fake Invoices to Compromise Networks

Do Son June 10, 2026 0

Discover how the Havoc stager campaign exploits fake invoices. Read the LevelBlue SpiderLabs report detailing this stealthy threat.

Cybercriminals Deploy Malicious AI Extensions to Steal Private Chat Data

• Data Leak
• Malware

Cybercriminals Deploy Malicious AI Extensions to Steal Private Chat Data

Do Son June 10, 2026 0

A new report reveals how malicious AI extensions use browser data exfiltration tactics to steal private conversations from ChatGPT and Claude.