Malware

SolyxImmortal Info Stealer Exploits Systems via Discord

• Malware

SolyxImmortal Info Stealer Exploits Systems via Discord

Do Son May 31, 2026 0

The SolyxImmortal info stealer targets user data. Learn how this Python malware steals passwords and abuses Discord webhooks to exfiltrate files.

Massive npm Dependency Confusion Attack Infiltrates Corporate Ecosystems

• Malware

Massive npm Dependency Confusion Attack Infiltrates Corporate Ecosystems

Do Son May 30, 2026 0

Microsoft uncovers a massive npm dependency confusion attack targeting enterprise infrastructure. Learn how these malicious packages discovered run code.

PureLogs Info Stealer Campaign Exploits Trusted Windows Process

• Malware

PureLogs Info Stealer Campaign Exploits Trusted Windows Process

Do Son May 29, 2026 0

FortiGuard Labs exposes a highly evasive PureLogs info stealer campaign utilizing process hollowing and fileless execution.

Advanced Lazarus Memory-Only Toolset Deeply Analyzed by Fox-IT

• Malware

Advanced Lazarus Memory-Only Toolset Deeply Analyzed by Fox-IT

Do Son May 29, 2026 0

Fox-IT uncovers a sophisticated Lazarus memory-only toolset used to compromise financial firms via an evasive three-stage malware pipeline.

Microsoft Exposes Malicious Typosquat Cluster Targeting Cloud Environments

• Malware

Microsoft Exposes Malicious Typosquat Cluster Targeting Cloud Environments

Do Son May 29, 2026 0

A critical npm supply chain attack exploits lookalike packages to distribute credential harvesting malware. Learn how to protect your cloud assets.

North Korea-Aligned Void Dokkaebi Evolves with Binary Obfuscation

• Malware

North Korea-Aligned Void Dokkaebi Evolves with Binary Obfuscation

Do Son May 28, 2026 0

TrendAI Research exposes the new Void Dokkaebi Cython malware campaign. Learn how InvisibleFerret uses binary compilation to evade security teams.

New Showboat Linux Malware Targets Global Telecommunications

• Malware

New Showboat Linux Malware Targets Global Telecommunications

Do Son May 28, 2026 0

Discover the new Showboat Linux malware framework uncovered by Black Lotus Labs. Learn how PRC threat actors target telecommunications networks.

Global Ghost CMS Poisoning Campaign Exploits Enterprise Blogs

• Malware
• Vulnerability Report

Global Ghost CMS Poisoning Campaign Exploits Enterprise Blogs

Do Son May 27, 2026 0

XLab uncovers a massive Ghost CMS poisoning campaign utilizing CVE-2026-26980 to launch FakeCaptcha attacks. Learn how to secure your site.

Clever Phishing Campaign Exploits Corporate Trust in Pakistan

• Malware

Clever Phishing Campaign Exploits Corporate Trust in Pakistan

Do Son May 26, 2026 0

Learn how a sophisticated phishing campaign leverages VS Code Remote Tunnels abuse to bypass security and control enterprise networks.

New Tampered Chef Malware Campaigns Discovered in Productivity Software

• Malware

New Tampered Chef Malware Campaigns Discovered in Productivity Software

Do Son May 26, 2026 0

Researchers uncover the Tampered Chef malware cluster disguised as PDF editors and tools. Learn how these stealthy threats bypass corporate defenses.

Poisoned Code: Stealthy Malicious Go Module Backdoor Discovered in Long-Running Typosquat

• Malware

Poisoned Code: Stealthy Malicious Go Module Backdoor Discovered in Long-Running Typosquat

Do Son May 25, 2026 0

Security researchers have exposed a malicious Go module backdoor hidden inside the shopsprint/decimal package that executes code using stealthy DNS TXT records.

In-Memory Financial Theft: Inside Banana RAT’s Operator-Driven Attacks on Brazilian Banks

• Malware

In-Memory Financial Theft: Inside Banana RAT’s Operator-Driven Attacks on Brazilian Banks

Do Son May 25, 2026 0

TrendAI exposes Banana RAT, a fileless banking trojan by SHADOW-WATER-063 that uses in-memory execution and fake UI overlays to hijack Pix-QR transfers.

Cloud Under Siege: Persistent P2Pinfect Botnet Activity Discovered in Kubernetes Environments

• Malware

Cloud Under Siege: Persistent P2Pinfect Botnet Activity Discovered in Kubernetes Environments

Do Son May 24, 2026 0

A recent report shows persistent P2Pinfect botnet activity inside Google Kubernetes Engine via exposed Redis instances. Learn how to secure your network.

Legitimate Software Abused: Stealthy ValleyRAT Malware Campaign Targets Enterprise Users

• Malware

Legitimate Software Abused: Stealthy ValleyRAT Malware Campaign Targets Enterprise Users

Do Son May 24, 2026 0

A sophisticated ValleyRAT malware campaign uses fake Microsoft Teams installers and DLL sideloading to evade Windows Defender detection.

Malicious JS Lifecycle Hooks Found Hiding Inside PHP Composer Packages

• Malware

Malicious JS Lifecycle Hooks Found Hiding Inside PHP Composer Packages

Do Son May 23, 2026 0

Socket exposes a clever cross-ecosystem supply chain attack targeting PHP packages by hiding a malicious JS postinstall backdoor inside package.json.

Supply Chain Storm: Over 700 Laravel Lang Versions Poisoned with Malicious RCE Backdoor

• Malware

Supply Chain Storm: Over 700 Laravel Lang Versions Poisoned with Malicious RCE Backdoor

Do Son May 23, 2026 0

DevOps Alert: Over 700 laravel-lang localization package versions have been backdoored with a cross-platform 17-collector info-stealer. Audit your logs.

WantToCry Ransomware Leverages Exposed SMB for Remote Encryption Loops

• Malware

WantToCry Ransomware Leverages Exposed SMB for Remote Encryption Loops

Do Son May 23, 2026 0

Sophos exposes WantToCry, a remote ransomware campaign that avoids EDR by using brute-forced SMB shares to read, encrypt, and rewrite files from afar.

Malware-as-a-Service Exposed: Cisco Talos Unmasks Developer Behind Prolific “BadIIS” Web Server Toolkit

• Malware

Malware-as-a-Service Exposed: Cisco Talos Unmasks Developer Behind Prolific “BadIIS” Web Server Toolkit

Do Son May 22, 2026 0

Cisco Talos exposes a commodity BadIIS variant sold as a service by dev "lwxat," featuring automated builders for traffic hijacking and reverse proxying.

Bypassing Terminal Protections: New SHub “Reaper” Variant Abuses AppleScript to Loot macOS Endpoints

• Malware

Bypassing Terminal Protections: New SHub “Reaper” Variant Abuses AppleScript to Loot macOS Endpoints

Do Son May 22, 2026 0

SentinelOne exposes the SHub Stealer "Reaper" variant. It bypasses Apple's latest Terminal paste mitigations to hijack crypto wallets and corporate documents.

Predating Stuxnet: How the “fast16” Malware Secretly Sabotaged Nuclear Weapons Simulations

• Malware

Predating Stuxnet: How the “fast16” Malware Secretly Sabotaged Nuclear Weapons Simulations

Do Son May 21, 2026 0

Symantec exposes fast16, a 2005 cyber-sabotage framework designed to inject an in-memory Lua engine and corrupt uranium-compression weapons simulations.

New PawsRunner Steganography Loader Evades EDR to Deploy PureLogs Infostealer

• Malware

New PawsRunner Steganography Loader Evades EDR to Deploy PureLogs Infostealer

Do Son May 21, 2026 0

FortiGuard Labs warns of PawsRunner, a new .NET steganography loader hiding PureLogs infostealer payloads inside cat images to bypass corporate EDR.

Bypassing MFA: Gremlin Stealer Evolves into Advanced Memory-Resident Session Hijacker

• Malware

Bypassing MFA: Gremlin Stealer Evolves into Advanced Memory-Resident Session Hijacker

Do Son May 21, 2026 0

Unit 42 exposes the new Gremlin stealer. It uses memory-resident techniques to hijack active browser session tokens and completely bypass MFA.