Malware Archives • Page 6 of 125 • Daily CyberSecurity

JADEPUFFER Marks the First AI-Driven Agentic Ransomware Attack JADEPUFFER agentic ransomware attack chain diagram from Langflow RCE to database extortion

JADEPUFFER agentic ransomware attack chain diagram from Langflow RCE to database extortion

JADEPUFFER Marks the First AI-Driven Agentic Ransomware Attack

Do Son July 10, 2026

At a Glance Malware family JADEPUFFER (agentic ransomware) Threat actor Unnamed operator; Sysdig assesses an autonomous AI...

Hidden LG Monitor Adware: Stop Unwanted Pop-ups Now LG monitor adware warning showing unwanted McAfee pop-ups and bloatware installation

Hidden LG Monitor Adware: Stop Unwanted Pop-ups Now

Do Son July 9, 2026

Hidden LG Monitor Adware Sparks Outrage Typically, intrusive pop-up advertisements originate from pre-installed adware or deliberately downloaded...

Native Messaging Backdoor Turns a Chrome Extension Into a Windows Threat Native Messaging backdoor malicious Chrome extension PowerShell Windows infection chain diagram

Native Messaging backdoor malicious Chrome extension PowerShell Windows infection chain diagram

Native Messaging Backdoor Turns a Chrome Extension Into a Windows Threat

Do Son July 8, 2026

At a Glance Malware type Native Messaging backdoor with a malicious Chrome extension Threat actor Unattributed Targets...

Veil#Drop Malware Uses Blogspot to Deliver PureLog Stealer China influence operations using banned ChatGPT accounts in OpenAI's June 2026 threat report targeting the US AI policy debate

China influence operations using banned ChatGPT accounts in OpenAI's June 2026 threat report targeting the US AI policy debate

Veil#Drop Malware Uses Blogspot to Deliver PureLog Stealer

Do Son July 8, 2026

Malware family PureLog Stealer (delivered by the Veil#Drop framework) Threat actor Not attributed by Securonix Targets Windows...

RustDuck Botnet: A Two-Stage DDoS Threat Shifting From C to Rust RustDuck botnet two-stage DDoS malware loader core architecture analysis diagram

RustDuck botnet two-stage DDoS malware loader core architecture analysis diagram

RustDuck Botnet: A Two-Stage DDoS Threat Shifting From C to Rust

Do Son July 7, 2026

At a Glance Malware family RustDuck Threat actor Unattributed Targets / victims IoT devices, web apps, and...

ValleyRAT Malware Hits Japanese and Chinese Users Through Email Attacks ValleyRAT malware email campaign delivering DLL sideloading payload to Japanese and Chinese users

ValleyRAT malware email campaign delivering DLL sideloading payload to Japanese and Chinese users

ValleyRAT Malware Hits Japanese and Chinese Users Through Email Attacks

Do Son July 6, 2026

At a glance Details Malware family ValleyRAT (Remote Access Trojan) Threat actor Often linked to SilverFox; attribution...

Ousaban Banking Trojan Targets Spain and Portugal Ousaban banking trojan infection chain diagram showing malware delivery methods.

Ousaban Banking Trojan Targets Spain and Portugal

Do Son July 6, 2026

At a glance: Malware Family: Ousaban Threat Actor: Unknown (Suspected Latin American origin) Targets/Victims: Banking customers in...

Silent Swap Crypto Clipper Hides in Google Notes Extension Diagram showing the Silent Swap crypto clipper and Google Notes extension infection chain

Diagram showing the Silent Swap crypto clipper and Google Notes extension infection chain

Silent Swap Crypto Clipper Hides in Google Notes Extension

Do Son July 3, 2026

Unsigned software installers are distributing a dangerous new malware strain that quietly intercepts digital currency transactions. Security...

Glitch SPY Android RAT Spreads Through a Fake Polish Rental App Glitch SPY Android RAT distributed through a fake Polish rental app abusing Accessibility Service

Glitch SPY Android RAT distributed through a fake Polish rental app abusing Accessibility Service

Glitch SPY Android RAT Spreads Through a Fake Polish Rental App

Do Son July 3, 2026

At a glance Malware family Glitch SPY (Android RAT and builder platform) Threat actor Unattributed; operator unidentified...

Fake Perplexity AI Extension Hijacks Browser Search and Logs Keystrokes North Korean hackers behind open-source supply chain attacks on axios, debug, and chalk NPM packages

North Korean hackers behind open-source supply chain attacks on axios, debug, and chalk NPM packages

Fake Perplexity AI Extension Hijacks Browser Search and Logs Keystrokes

Do Son July 2, 2026

At a glance Malware Malicious browser extension / search hijacker (“Search for perplexity ai”) Threat actor Not...

TONResolver Malware Hides Its C2 in the TON Blockchain to Hit Hotel Partners TONResolver malware infection chain using a TON blockchain dead drop resolver against Booking.com hotel partners

TONResolver malware infection chain using a TON blockchain dead drop resolver against Booking.com hotel partners

TONResolver Malware Hides Its C2 in the TON Blockchain to Hit Hotel Partners

Do Son July 2, 2026

At a glance Malware TONResolver (RAT; also tracked as TonRAT by Microsoft; detected as TrojanSpy.JS.TONRESOLVER.A) Threat actor...

Malicious OpenClaw Skills on ClawHub Deliver Infostealers and Crypto Fraud Malicious OpenClaw skills on the ClawHub marketplace enabling an AI supply chain attack

Malicious OpenClaw skills on the ClawHub marketplace enabling an AI supply chain attack

Malicious OpenClaw Skills on ClawHub Deliver Infostealers and Crypto Fraud

Do Son July 1, 2026

At a glance Field Detail Actor Unattributed skill publishers; accounts banned by OpenClaw Activity Malicious AI agent...

INC Ransomware Targets Mainframes in APAC Campaign

INC ransomware targets mainframes using cross-platform ransomware payloads

INC Ransomware Targets Mainframes in APAC Campaign

Do Son June 30, 2026

At a glance Malware Family: INC Ransomware Threat Actor: Unknown INC affiliate (Suspected) Targets: APAC manufacturing, Japanese...

Turla STOCKSTAY Backdoor Targets Ukrainian Military Turla STOCKSTAY backdoor attacks Ukrainian military targets

Turla STOCKSTAY Backdoor Targets Ukrainian Military

Do Son June 30, 2026

At a glance Malware Family: STOCKSTAY Threat Actor: Turla (Confirmed: Center 16 of Russia’s FSB) Targets: Ukrainian...

Cursor iOS Beta App Brings Remote AI Coding to Mobile Cursor iOS beta app interface for remote AI coding

Cursor iOS Beta App Brings Remote AI Coding to Mobile

Do Son June 30, 2026

Recently, the AI-driven coding tool Cursor launched an iOS beta version. Fundamentally, this mobile application solves a...

SharkLoader Malware Deploys Cobalt Strike in Global StrikeShark Campaign SharkLoader malware infection chain deploying Cobalt Strike Beacon in the StrikeShark campaign

SharkLoader malware infection chain deploying Cobalt Strike Beacon in the StrikeShark campaign

SharkLoader Malware Deploys Cobalt Strike in Global StrikeShark Campaign

Do Son June 29, 2026

At a glance Field Detail Malware family SharkLoader (loader) delivering Cobalt Strike Beacon Threat actor StrikeShark; unattributed,...

macOS Gaslight Malware Uses LLM Prompt Injection Diagram showing macOS Gaslight malware infection chain and Rust backdoor prompt injection

macOS Gaslight Malware Uses LLM Prompt Injection

Do Son June 29, 2026

At a glance Malware Family: macOS.Gaslight Threat Actor: High confidence DPRK-aligned (North Korea) Target or Victims: macOS...

Edgecution Malware Turns a Microsoft Edge Extension Into a Backdoor C2Looper Rust backdoor diagram showing GitHub command-and-control and ClickFix ransomware infection chain

C2Looper Rust backdoor diagram showing GitHub command-and-control and ClickFix ransomware infection chain

Edgecution Malware Turns a Microsoft Edge Extension Into a Backdoor

Do Son June 29, 2026

At a Glance Malware family Edgecution (malicious Microsoft Edge extension plus a Python backdoor) Threat actor Initial...

Mistic Backdoor Linked to Ransomware Access Broker Mistic backdoor malware and ransomware access broker diagram

Mistic Backdoor Linked to Ransomware Access Broker

Do Son June 27, 2026

At a glance Malware Family: Backdoor.Mistic Threat Actor: Suspected Woodgnat (aka KongTuke) Target or Victims: Insurance, education,...

Langflow Cryptominer Malware Exploits CVE-2026-33017 Trojanized streaming site causing Packagist themes iOS spyware infections

Langflow Cryptominer Malware Exploits CVE-2026-33017

Do Son June 27, 2026

At least 39 rival malware families appear on a kill list used by a new Langflow cryptominer...

OXLOADER Malware Loader Spreads CASTLESTEALER via Fake Node.js Ads TanStack Typosquatting npm Supply Chain Attack Axios Supply Chain Attack npm Poisoning eScan Supply Chain Attack Antivirus Compromise APT-36, NCERT WhatsApp Advisory FBI alert, Salesforce Salt Typhoon, APT group ConnectWise ScreenConnect hack Nation-state cyberattack FortiGate Leak - zkLend vulnerability - TRIPLESTRENGTH Threat Actor Group Dark Storm

TanStack Typosquatting npm Supply Chain Attack Axios Supply Chain Attack npm Poisoning eScan Supply Chain Attack Antivirus Compromise APT-36, NCERT WhatsApp Advisory FBI alert, Salesforce Salt Typhoon, APT group ConnectWise ScreenConnect hack Nation-state cyberattack FortiGate Leak - zkLend vulnerability - TRIPLESTRENGTH Threat Actor Group Dark Storm

OXLOADER Malware Loader Spreads CASTLESTEALER via Fake Node.js Ads

Do Son June 26, 2026

At a Glance Malware family OXLOADER (loader) delivering CASTLESTEALER (.NET infostealer) Threat actor Unnamed; suspected Russian-speaking and...

Remcos RAT delivered by a steganographic loader hidden in a bitmap image

Remcos RAT Delivered by a Steganographic Loader in Phishing Emails

Do Son June 26, 2026

At a Glance Malware family Remcos RAT (final payload), via a multi-stage .NET loader chain Threat actor...